linux/poky.git/meta/recipes-extended/ghostscript, branch uninative-3.0

ghostscript: update 9.52 -> 9.53.3

2020-10-30T13:22:48+00:00

ghostscript-9.15-parallel-make.patch rebased; one of the chunks removed upstream. Remove bundled jpeg source, as that seems to be the only way to get ghostscript to fall back to system jpeg library. (From OE-Core rev: ad8c8ffc5a008872d40a36ea825da30accd6a11a) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

ghostscript: fix CVE-2020-15900

2020-08-08T08:17:48+00:00

(From OE-Core rev: d70012e8971a4762ea402c3c843938640b9ab9fc) Signed-off-by: Lee Chee Yang Signed-off-by: Richard Purdie

ghostscript: Remove leftover file

2020-05-18T05:33:36+00:00

This should have been removed in a previous change but was accidentally left behind and points at an invalid directory. (From OE-Core rev: 9d6ce24207189c711099f45265b240d0cdc0e686) Signed-off-by: Richard Purdie

ghostscript: update 9.50 -> 9.52

2020-05-03T14:41:40+00:00

Drop all custom objarch.h files; ghostscript nowadays generates that with autoconf. Freetype can no longer be disabled. Building out of source tree is broken. (From OE-Core rev: bb699a99b2e99a868520430c614d55ea3004427c) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

ghostscript: do not hardcode version in SRC_URI

2020-05-03T14:41:40+00:00

(From OE-Core rev: e0d972a054e286d62ccf9e3ccc4ec00892198038) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

microblaze: Adjust Linux items from microblazeeb to microblaze

2020-02-06T12:16:34+00:00

Due to recent changes to the tune, in order to match config.guess, the name of the big-endian microblaze architecture was changes to 'microblaze'. (From OE-Core rev: 6f6a6bbac684ead3fe6d070d61f17c2f611a2c87) Signed-off-by: Mark Hatle Signed-off-by: Richard Purdie

ghostscript: Add powerpc64 LE specific objarch.h

2020-01-19T23:49:39+00:00

(From OE-Core rev: 2b2ebb11da16975e3b0cba7854c3cfe54e0305a3) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

ghostscript: upgrade 9.27 -> 9.50

2019-12-09T12:00:43+00:00

Version 9.50 incorporates previously-backported fixes for CVE-2019-14811 and CVE-2019-14817. CVE: CVE-2019-14811 CVE: CVE-2019-14817 (From OE-Core rev: 8c626421840da9441be03587a57e9cf1ebd3d6f0) Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie

ghostscript: fix for CVE-2019-14811 is same as CVE-2019-14813

2019-11-29T17:43:40+00:00

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14813 https://www.openwall.com/lists/oss-security/2019/08/28/2 (From OE-Core rev: afef29326b4332fc87c53a5d9d43288cddcdd944) Signed-off-by: Anuj Mittal Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

ghostscript: CVE-2019-14869

2019-11-25T17:57:23+00:00

A flaw was found in all versions of ghostscript 9.x before 9.28, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands. References: https://nvd.nist.gov/vuln/detail/CVE-2019-14869 Upstream patches: https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904 (From OE-Core rev: 0bb88ac63b4e1728373c6425477a32f7a6362b2c) Signed-off-by: Stefan Ghinea Signed-off-by: Ross Burton Signed-off-by: Richard Purdie