-
ghostscript (10.03.1~dfsg-1) unstable; urgency=medium
[ Steve Robbins ]
* [a82a848] New upstream version 10.03.1~dfsg
-- Steve M. Robbins <email address hidden> Mon, 27 May 2024 22:22:53 -0500
-
ghostscript (10.03.1~dfsg~git20240518-1) unstable; urgency=medium
[ Steve Robbins ]
* [2e5797b] New upstream version 10.03.1~dfsg~git20240518, built from
upstream git commit 7145885041bb52cc23964f0aa2aec1b1c82b5908
-- Steve M. Robbins <email address hidden> Sat, 18 May 2024 19:24:20 -0500
-
ghostscript (10.03.0~dfsg-1) unstable; urgency=medium
[ Steve Robbins ]
* [d50c139] Add "breaks" relationship with manpages-l10n to transition
German manpages. Closes: #1065396.
* [9adc766] Simplify ps2ascii script. Closes: #992893.
* [15664c9] New upstream version 10.03.0~dfsg
* [2396e20] Remove 0001_fix_pagelist.patch, applied in new version.
* [e3b0739] Add build-dep on python3-sphinx-copybutton
* [ff6b89f] Fix break relationship versioning.
* [2020bbc] Update obsolete dependency package names.
-- Steve M. Robbins <email address hidden> Thu, 21 Mar 2024 22:44:42 -0500
-
ghostscript (10.02.1~dfsg-3) unstable; urgency=medium
[ наб ]
* [ee3d1ac] Simplify /sbin/update-gsfontmap (Closes: #992889)
[ Steve Robbins ]
* [ccc0e3c] Explicitly set font map files to be world readable.
Closes: #740959.
* [5fce3d3] Add suggestion for package texlive-binaries, needed to use dvipdf. Closes: #782901.
* [9ab8028] ghostscript: add conflicts to ghostcript-x to allow removal of the obsolete transitional package. Closes: #1053377
-- Steve M. Robbins <email address hidden> Sat, 20 Jan 2024 15:44:07 -0600
-
ghostscript (10.02.1~dfsg-2) unstable; urgency=medium
[ Steve Robbins ]
* [4b077b5] Incorporate upstream patch to fix PageList processing in PDF
handler. Closes: #1052652
* [b4524f9] New maintainer. Closes: #1022718, #1036869.
-- Steve M. Robbins <email address hidden> Sat, 06 Jan 2024 01:16:23 -0600
-
ghostscript (10.02.1~dfsg-1) unstable; urgency=medium
* QA upload
[ upstream ]
* new release(s)
[ Jonas Smedegaard ]
* update copyright info: update coverage
-- Jonas Smedegaard <email address hidden> Wed, 08 Nov 2023 08:36:16 +0100
-
ghostscript (10.02.0~dfsg-2) unstable; urgency=medium
* QA upload
* declare that ghostscript replaces older ghostscript-x
-- Jonas Smedegaard <email address hidden> Thu, 14 Sep 2023 06:37:04 +0200
-
ghostscript (10.02.0~dfsg-1) unstable; urgency=medium
* QA upload
[ upstream ]
* new release(s)
[ Jonas Smedegaard ]
* update copyright info: update coverage
* refresh patches;
update DEP-3 patch headers
* drop obsolete binary packages ghostscript-x libgs9-common;
have binary package ghostscript provide ghostscript-x
-- Jonas Smedegaard <email address hidden> Wed, 13 Sep 2023 20:18:16 +0200
-
ghostscript (10.01.2~dfsg-1) unstable; urgency=medium
* QA upload
[ upstream ]
* new release(s)
[ Jonas Smedegaard ]
* fix source helper tool copyright-check to avoid insecure shell expansion
* fix source helper tool copyright-check to work with Path::Tiny 0.144
* declare compliance with Debian Policy 4.6.2
* update copyright info: extend repackaging to exclude images containing non-DFSG ICC profile
* drop patches obsoleted by upstream changes
* unfuzz patches
-- Jonas Smedegaard <email address hidden> Thu, 22 Jun 2023 08:15:42 +0200
-
ghostscript (10.0.0~dfsg-11) unstable; urgency=medium
* QA upload.
* Prevent buffer overrun in (T)BCP encoding (CVE-2023-28879)
(Closes: #1033757)
-- Salvatore Bonaccorso <email address hidden> Sat, 01 Apr 2023 09:48:32 +0200
-
ghostscript (10.0.0~dfsg-10) unstable; urgency=medium
* QA upload.
* Add patch from upstream to fix cross build. Closes: #717825
-- Håvard F. Aasen <email address hidden> Mon, 20 Mar 2023 09:12:00 +0100
-
ghostscript (10.0.0~dfsg-9) unstable; urgency=medium
* QA upload.
* Build docs with sphinx. Closes: #1024896, #1024964
-- Håvard F. Aasen <email address hidden> Mon, 12 Dec 2022 07:45:09 +0100
-
ghostscript (10.0.0~dfsg-8) unstable; urgency=medium
* QA upload
* debian/: No longer build with dynamic modules (Closes: #1023330)
- X11 support is now part of ghostscript and ghostcript-x is a
transitional package.
-- Sebastian Ramacher <email address hidden> Sun, 04 Dec 2022 16:00:05 +0100
-
ghostscript (10.0.0~dfsg-7) unstable; urgency=medium
* QA upload.
[ Debian Janitor ]
* Apply multi-arch hints. + ghostscript-x: Add Multi-Arch: same.
-- Jelmer Vernooij <email address hidden> Sun, 27 Nov 2022 04:28:59 +0000
-
ghostscript (10.0.0~dfsg-6) unstable; urgency=medium
* QA upload
* Upload to unstable
-- Sebastian Ramacher <email address hidden> Fri, 28 Oct 2022 12:31:22 +0200
-
ghostscript (10.0.0~dfsg-4) unstable; urgency=medium
* orphan package: set maintainer to Debian QA Group
-- Jonas Smedegaard <email address hidden> Mon, 24 Oct 2022 13:54:55 +0200
-
ghostscript (10.0.0~dfsg-3) unstable; urgency=medium
* build-depend on dh-sequence-pkgkde-symbolshelper
(not pkg-kde-tools)
-- Jonas Smedegaard <email address hidden> Tue, 18 Oct 2022 20:21:55 +0200
-
ghostscript (9.56.1~dfsg-1) unstable; urgency=medium
[ upstream ]
* new release
+ fix text rendering mode 3 and pdfwrite;
closes: bug#1009680, thanks to Paul Gevers and others
[ Jonas Smedegaard ]
* fix watch file
* update symbols: 1 private symbol added
-- Jonas Smedegaard <email address hidden> Wed, 20 Apr 2022 22:47:35 +0200
-
ghostscript (9.56.0~dfsg-1) unstable; urgency=medium
[ upstream ]
* new release
[ Jonas Smedegaard ]
* drop superfluous lintian overrides
* New upstream version 9.56.0~dfsg
* update symbols:
+ 56 private symbols added
+ 23 private symbols dropped
* use semantic newlines in long descriptions
-- Jonas Smedegaard <email address hidden> Wed, 30 Mar 2022 11:51:53 +0200
-
ghostscript (9.55.0~dfsg-3) unstable; urgency=medium
* add patch cherry-picked upstream
to fix the logic for freeing X pixmap;
really closes: bug#998888, thanks again to Florian Lindemann
-- Jonas Smedegaard <email address hidden> Tue, 30 Nov 2021 15:46:45 +0100
-
ghostscript (9.55.0~dfsg-2) unstable; urgency=medium
* add patch cherry-picked upstream
to fix gx_default_copy_alpha calling get_bits_rectangle;
closes: bug#1000710, thanks to Hilmar Preuße
-- Jonas Smedegaard <email address hidden> Mon, 29 Nov 2021 11:07:05 +0100
-
ghostscript (9.55.0~dfsg-1) unstable; urgency=medium
[ upstream ]
* new release
[ Jonas Smedegaard ]
* drop patch cherry-picked upstream now applied;
unfuzz patch 2009
* update copyright info:
+ update coverage
+ tighten lintian overrides
* update symbols:
+ 466 private symbols added
+ 76 private symbols dropped
* add patches cherry-picked upstream:
+ avoid freeing the background pixmap created by gv;
closes: bug#704709, thanks to Florian Lindemann
+ fix pdfwrite encoding bugs;
closes: bug#998458, #998461, thanks to Vincent Lefevre
-- Jonas Smedegaard <email address hidden> Fri, 19 Nov 2021 17:58:29 +0100
-
ghostscript (9.54.0~dfsg-5) unstable; urgency=medium
* Revert to not mark /usr/share/ghostscript/* as not-installed:
works but a clumsy approach
* properly fix tracking installed files
by expanding upstream ABI in debhelper snippets
(passing ABI-specific path dh_install options confuses dh_missing);
thanks to Roderich Schupp (see bug#994270)
* update symbols:
+ 20 private symbols added
+ 1 private symbol dropped
-- Jonas Smedegaard <email address hidden> Wed, 15 Sep 2021 14:04:05 +0200
-
ghostscript (9.53.3~dfsg-8) unstable; urgency=high
* add patch cherry-picked upstream
to fix access validationaccess validation;
closes: bug#994011;
CVE-2021-3781
* Set urgency=high due to security fix.
-- Jonas Smedegaard <email address hidden> Thu, 09 Sep 2021 20:12:26 +0200
-
ghostscript (9.53.3~dfsg-7) unstable; urgency=medium
* update previous changelog section, add a bug closure.
* update source helper script copyright-check.
* copyright: update coverage
* add patches cherry-picked upstream:
+ re-enable support for opvp/oprp devices;
closes: bug#980971, thanks to Chris Bainbridge
+ parse some types of broken PDFs;
closes: bug#981583, thanks to Rogério Brito
+ fix segfault parsing large Postscript file;
closes: bug#970878, thanks to Paul Gevers, Bernhard Übelacker,
Iustin Pop and Stefano Rivera
* update symbols: 4 private symbols added
-- Jonas Smedegaard <email address hidden> Tue, 02 Feb 2021 14:18:01 +0100
-
ghostscript (9.53.3~dfsg-6) unstable; urgency=medium
* copyright-check:
+ fix quote path when creating temporary skipfile
+ ignore skipfiles below debian/
+ compute robust file regex from content with regexp-assemble
+ list dependencies in header comment
* add source helper tools
patch-cherry-pick patch-mkseries patch-refresh-all
* copyright:
+ update coverage
+ consistently wrap Files and Copyright paragraphs
(sole exception being initial wildcard Files paragraph)
* add patch cherry-picked upstream,
and patch by Stefano Rivera,
to fix endian issues with CMM;
closes: bug#976177, thanks to Stefano Rivera
* declare compliance with Debian Policy 4.5.1
* update git-buildpackage settings:
+ use DEP-14 git branch names
+ add usage comment
* add patch cherry-picked upstream
to fix linking with libfreetype 2.10.3 and newer
-- Jonas Smedegaard <email address hidden> Wed, 23 Dec 2020 02:51:22 +0100
-
ghostscript (9.53.3~dfsg-5) unstable; urgency=medium
* simplify build routines slightly
* tighten source script copyright-check
* update copyright hints
* relax tracking of symlinks to fonts-urw-base35
to ignore file contents;
closes: bug#972896, thanks to Fabian Greffrath
-- Jonas Smedegaard <email address hidden> Mon, 26 Oct 2020 11:04:53 +0100
-
ghostscript (9.53.3~dfsg-4) unstable; urgency=medium
* simplify build: rely on configure defaults
* avoid build-depending on libcups2-dev libcupsimage2-dev for kfreebsd
-- Jonas Smedegaard <email address hidden> Tue, 06 Oct 2020 16:34:30 +0200
-
ghostscript (9.53.3~dfsg-3) unstable; urgency=medium
* fix arch-only build;
closes: bug#971678, thanks to Sebastian Ramacher and Simon McVittie
* fix revert to avoid parallel builds (see bug#971678)
* copyright: tighten coverage of default licensed files
* copyright-check:
+ license as GPL-3+
+ check step-wise, with some cleanup
+ check default licensed files first
* fix build-depend on zlib1g-dev:native
(not virtual libz-dev:native);
closes: bug#971738, thanks to Simon McVittie
-- Jonas Smedegaard <email address hidden> Tue, 06 Oct 2020 14:59:44 +0200
-
ghostscript (9.53.3~dfsg-2) unstable; urgency=medium
* improve (but not fully solve) cross build support:
+ add patch 1001 to allow skipping configure during bootstrap,
and use that during build
+ build-depend on libz-dev:native (not libz-dev)
closes: bug#971092, thanks to Helmut Grohne
* simplify build;
migrate binary package ghostscript-dbg
to automated *-dbgsym packages;
stop build-depend on cdbs
* fix configure additional multi-arch paths
* use debhelper compatibility level 12 (not 10);
build-depend on debhelper-compat (not debhelper)
* unfuzz patch 2009
-- Jonas Smedegaard <email address hidden> Sun, 04 Oct 2020 13:52:56 +0200
-
ghostscript (9.53.3~dfsg-1) unstable; urgency=medium
[ upstream ]
* new bugfix release
[ Jonas Smedegaard ]
* drop superfluous license hint and lintian overrides
-- Jonas Smedegaard <email address hidden> Thu, 01 Oct 2020 12:54:33 +0200
-
ghostscript (9.53.2~dfsg-1) unstable; urgency=medium
[ upstream ]
* new bugfix release
* simplify source script copyright-check
* unfuzz patch 2009
* update Uploaders field to reflect actual maintenance;
thanks for your past contributions,
Michael Gilbert and Bastien ROUCARIÈS,
and feel free to join again
-- Jonas Smedegaard <email address hidden> Fri, 25 Sep 2020 16:51:43 +0200
-
ghostscript (9.53.1~dfsg-2) unstable; urgency=medium
* simple rebuild,
to re-sync symlinks with newer release of fonts-urw-base35
-- Jonas Smedegaard <email address hidden> Thu, 17 Sep 2020 11:23:43 +0200
-
ghostscript (9.53.1~dfsg-1) unstable; urgency=medium
[ upstream ]
* new release
-- Jonas Smedegaard <email address hidden> Mon, 14 Sep 2020 17:36:04 +0200
-
ghostscript (9.53.0~dfsg-1) unstable; urgency=medium
* New upstream version 9.53.0~dfsg
* tighten build-dependency on libjbig2dec0-dev
* enable parallel build
* update symbols:
+ 6 public symbols added
+ 45 private symbols added
+ 25 private symbols dropped
-- Jonas Smedegaard <email address hidden> Thu, 10 Sep 2020 21:08:17 +0200
-
ghostscript (9.52.1~dfsg-1) unstable; urgency=high
[ upstream ]
* new release
(CVE-2020-15900)
[ Jonas Smedegaard ]
* set urgency=high, due to CVE fix
* have autoreconf use upstream bootstrapping script
* resolve abi from upstream build scripts
-- Jonas Smedegaard <email address hidden> Thu, 20 Aug 2020 17:38:01 +0200
-
ghostscript (9.52~dfsg-1) unstable; urgency=medium
* New upstream version 9.52~dfsg
* watch:
+ simplify usage comment
+ use dversionmangle=auto
* declare compliance with Debian Policy 4.5.0
* trim trailing whitespace
* wrap long lines in older changelog entries
* use debhelper 10 (not 9);
stop build-depend explicitly on dh-autoreconf
* copyright: fix use field Comment (not unofficial Comments)
-- Jonas Smedegaard <email address hidden> Thu, 19 Mar 2020 15:52:14 +0100
-
ghostscript (9.51~dfsg-1) unstable; urgency=medium
[ upstream ]
* new release
[ Jonas Smedegaard ]
* update symbols:
+ 20 private symbols added
+ 3 private symbols dropped
-- Jonas Smedegaard <email address hidden> Thu, 12 Mar 2020 17:57:57 +0100
-
ghostscript (9.50~dfsg-5) unstable; urgency=medium
* add patch cherry-picked upstream
to add 'omitEOD' flag to RLE compressor and use for PXL;
closes: bug#941864,
thanks to Agustin Martin and Johannes Stezenbach
-- Jonas Smedegaard <email address hidden> Wed, 27 Nov 2019 20:15:08 +0100
-
ghostscript (9.50~dfsg-4) unstable; urgency=medium
* fix CVE reference in previous changelog entry
* fix stop needlessly have ligs-dev depend on build-dependencies;
stop build-depend on d-shlibs;
closes: bug#945516, thanks to Thomas Loimer
* add patch cherry-picked upstream to fix dvipdf script;
closes: bug#941163, thanks to Alexis Bienvenüe
-- Jonas Smedegaard <email address hidden> Wed, 27 Nov 2019 17:57:01 +0100
-
ghostscript (9.50~dfsg-3) unstable; urgency=medium
* add patch cherry-picked upstream to remove .forceput from /.charkeys;
closes: bug#944760 (CVE-2019-10216); thanks to Salvatore Bonaccorso
* unfuzz patches 2007 2009
-- Jonas Smedegaard <email address hidden> Wed, 27 Nov 2019 00:13:36 +0100
-
ghostscript (9.50~dfsg-2) unstable; urgency=medium
* Build-depend on libfreetype-dev (not libfreetype6-dev).
-- Jonas Smedegaard <email address hidden> Tue, 15 Oct 2019 15:56:44 +0200
-
ghostscript (9.28~~rc4~dfsg-1) unstable; urgency=medium
[ upstream ]
* New pre-release.
[ Jonas Smedegaard ]
* Declare compliance with Debian Policy 4.4.1.
* Update symbols file: 1 private symbol added.
-- Jonas Smedegaard <email address hidden> Wed, 02 Oct 2019 10:58:26 +0200
-
ghostscript (9.28~~rc3~dfsg-1) unstable; urgency=medium
[ upstream ]
* New pre-release.
[ Jonas Smedegaard ]
* Fix tighten to build-depend on libjbig2dec0-dev
new enough to provide pkg-config file
(required since Ghostscript 9.28 rc1).
-- Jonas Smedegaard <email address hidden> Wed, 18 Sep 2019 17:15:43 +0200
-
ghostscript (9.28~~rc2~dfsg-2) unstable; urgency=medium
* Mark ghostscript-doc as Multi-Arch: foreign.
* Update watch file:
+ Simplify regular expressions.
+ Rewrite usage comment.
* Simplify rules: Use autoreconf.
Build-depend on dh-autoreconf (not explicitly autoconf).
* Fix link with libjbig2dec
by including pkg-config file with that package,
needed by ghostscript 9.28.
Update symbols file: 6 private symbols added,
-- Jonas Smedegaard <email address hidden> Tue, 17 Sep 2019 05:13:48 +0200
-
ghostscript (9.28~~rc2~dfsg-1) unstable; urgency=medium
[ upstream ]
* New pre-release.
[ Jonas Smedegaard ]
* Update git-buildpackage config: Use dep14 git branch debian/master.
* Unfuzz patch 2009,
and extend to cover privacy leak in doc/Internal.htm.
-- Jonas Smedegaard <email address hidden> Fri, 06 Sep 2019 14:40:13 +0200
-
ghostscript (9.28~~rc1~dfsg-1) unstable; urgency=medium
[ upstream ]
* New pre-release.
[ Jonas Smedegaard ]
* Add NEWS entry about redefined option -dSAFER.
* Drop obsolete upstream cherry-picked patches.
* Unfuzz and update patches.
* Update copyright info: Stop track a file no longer shipped upstream.
* Update symbols:
+ 8 public symbols added.
+ 65 private symbols added.
+ 22 private symbols dropped.
-- Jonas Smedegaard <email address hidden> Mon, 19 Aug 2019 11:20:52 +0200
-
ghostscript (9.27~dfsg-3.1) unstable; urgency=medium
* Non-maintainer upload (with maintainers approval).
* protect use of .forceput with executeonly (CVE-2019-10216)
(Closes: #934638)
-- Salvatore Bonaccorso <email address hidden> Tue, 13 Aug 2019 09:49:11 +0200
-
ghostscript (9.27~dfsg-3) unstable; urgency=medium
* Declare compliance with Debian Policy 4.4.0.
* Symlink bas53 fonts from fonts-urw-base35.
Build-depend on rename.
(Build-)depend on fonts-urw-base35, and stop recommend gsfonts.
Closes: Bug#613912, 932897.
Thanks to Fabian Greffrath and Julian Wollrath.
-- Jonas Smedegaard <email address hidden> Wed, 24 Jul 2019 12:45:28 -0300
-
ghostscript (9.27~dfsg-2) unstable; urgency=medium
* Add patch cherry-picked upstream
to fix regression resolving bounding box of font glyphs.
Closes: Bug#927429. Thanks to Kenshi Muto.
-- Jonas Smedegaard <email address hidden> Sat, 20 Apr 2019 10:16:50 +0200
-
ghostscript (9.27~dfsg-1) unstable; urgency=high
[ upstream ]
* New release.
Closes: Bug#925256, 925257 (CVE-2019-3835, CVE-2019-3838).
Thanks to Salvatore Bonaccorso.
* Set urgency=high, due to CVE fix.
[ Jonas Smedegaard ]
* Drop patches cherry-picked upstream now applied.
* Unfuzz patches.
* Build-depend versioned on libjbig2dec0-dev
(not unversioned on libjbig2dec-dev).
* Use dpkg-provided snippet
(not additional explicit dpkg-parsechangelog call)
to resolve when build is targeted experimental suite.
* Revert to again split ABI at ~ (not a)."
* Update copyright info: Extend coverage for main upstream author.
* Update testsuite to catch new error message.
* Update symbols:
+ 18 private symbols dropped.
+ 51 private symbols dropped.
-- Jonas Smedegaard <email address hidden> Thu, 04 Apr 2019 20:17:20 +0200
-
ghostscript (9.26a~dfsg-2) unstable; urgency=medium
* Update symbols: 1 private added.
* Add test to check that upstream bug 700317 is fixed,
and a smoketest to check commanline options.
Enable bugchecking and smoketest during build,
and smoketest as autopkgtest.
-- Jonas Smedegaard <email address hidden> Wed, 23 Jan 2019 20:26:09 +0100
-
ghostscript (9.26a~dfsg-1) unstable; urgency=high
[ upstream ]
* New security release.
(CVE-2019-6116).
* Set urgency=high, due to CVE fix.
[ Jonas Smedegaard ]
* Consult DEB_BUILD_OPTIONS (not bogusly DEB_BUILD_PROFILES)
to decide if build is a profile.
* Declare compliance with Debian Policy 4.3.0.
* New upstream version 9.26a~dfsg
* Update copyright info: Extend coverage of packaging.
-- Jonas Smedegaard <email address hidden> Wed, 23 Jan 2019 12:47:56 +0100
-
ghostscript (9.26~dfsg-2) unstable; urgency=high
* Add patches cherry-picked upstream
to fix segfault with certain PDFs with -dLastPage=1.
Closes: Bug#915832. Thanks to Salvatore Bonaccorso.
* Set urgency=high as this is fixes regression in 9.26~dfsg-1.
-- Jonas Smedegaard <email address hidden> Sat, 22 Dec 2018 14:38:38 +0100
-
ghostscript (9.26~dfsg-1) unstable; urgency=high
[ upstream ]
* New security and bugfix release.
[ Jonas Smedegaard ]
* Drop patches cherry-picked upstream now applied.
* Unfuzz patch 2009.
* Set urgency=high due to high potential for security fixes
(beyond those already included as cherry-picked patches).
* Update symbols: 12 private added.
-- Jonas Smedegaard <email address hidden> Wed, 21 Nov 2018 10:27:59 +0100
-
ghostscript (9.25~dfsg-7) unstable; urgency=medium
* drop obsolete preinst migrations.
* Quote variables in package helper update-gsfontmap.
* Fix typos in previous changelog entries.
* Disable parallel building.
Closes: Bug#912847. Thanks to Matthias Klose.
-- Jonas Smedegaard <email address hidden> Sun, 04 Nov 2018 19:01:16 +0100
-
ghostscript (9.25~dfsg-6) unstable; urgency=medium
* Add patch cherry-picket upstream
to fix cups get/put_params LeadingEdge logic.
Closes: Bug#912664. Thanks to Salvatore Bonaccorso.
-- Jonas Smedegaard <email address hidden> Fri, 02 Nov 2018 19:24:03 +0100
-
ghostscript (9.25~dfsg-5) unstable; urgency=medium
* Add patch cherry-picket upstream
to fix openjpeg segfault if size too large.
-- Jonas Smedegaard <email address hidden> Thu, 01 Nov 2018 14:08:45 +0100
-
ghostscript (9.25~dfsg-4) unstable; urgency=high
* Re-release with urgency=high, due to CVE fixes.
-- Jonas Smedegaard <email address hidden> Fri, 19 Oct 2018 09:45:03 +0200
-
ghostscript (9.25~dfsg-3) unstable; urgency=medium
* Add patches cherry-picked upstream to fix execution issues.
+ Implement .currentoutputdevice operator
+ Change "executeonly" to throw typecheck on gstatetype and
devicetype objects
+ Undefine some additional internal operators.
+ Fix handling of .needinput if used from interpreter
+ Ensure all errors are included from initialization
+ setundercolorremoval memory corruption
+ copydevice fails after stack device copies invalidated
+ add operand checking to .setnativefontmapbuilt
+ add object type check for AES key
+ Add parameter type checking on .bigstring
+ zparse_dsc_comments can crash with invalid dsc_state
+ Catch errors in setpagesize, .setpagesize and setpagedevice and
cleanup
+ Catch errors and cleanup stack on statusdict page size definitions
+ Add parameter checking in setresolution
+ device subclass open_device call must return child code
+ fix DSC comment parsing in pdfwrite
+ Check all uses of dict_find* to ensure 0 return properly handled
+ permit Mod and CreDate pdfmarks in PDF 2.0 in pdfwrite
+ Avoid overrunning non terminated string buffer.
+ Prevent SEGV in gs_setdevice_no_erase.
+ Fix uninitialised value for render_cond.
+ Hide the .needinput operator
+ filenameforall calls bad iodev with insufficent scratch
+ Improve hiding of security critical custom operators
+ Prevent SEGV after calling gs_image_class_1_simple.
+ don't push userdict in preparation for Type 1 fonts
+ add control over hiding error handlers.
+ For hidden operators, pass a name object to error handler.
+ Explicitly exclude /unknownerror from the SAFERERRORLIST
+ don't include operator arrays in execstack output
+ Make .forceput unavailable from '.policyprocs' helper dictionary
+ .loadfontloop must be an operator
+ font parsing - prevent SEGV in .cffparse
Closes: Bug#910678, #910758, #911175
(CVE-2018-17961, CVE-2018-18073, CVE-2018-18284).
Thanks to Salvatore Bonaccorso.
* Unfuzz patches.
* Declare compliance with Debian Policy 4.2.1.
* Update symbols: 1 private added.
-- Jonas Smedegaard <email address hidden> Fri, 19 Oct 2018 00:11:32 +0200
-
ghostscript (9.25~dfsg-2) unstable; urgency=high
* Add/correct bug-closures for previous releases 9.25~dfsg-1,
9.25~dfsg-1~exp1, 9.24~~rc2~dfsg-1, 9.21~dfsg-1.
* Set urgency=high due to recent CVE fixes.
-- Jonas Smedegaard <email address hidden> Sat, 15 Sep 2018 14:18:15 +0200
-
ghostscript (9.25~dfsg-1) unstable; urgency=medium
* Stop needlessly install symlinks handled upstream since ~9.05.
* Tidy control file:
+ Wrap-and-sort.
+ Drop support for auto-resolving package relations or major version.
* Update package relations:
+ Stop needlessly depend on debconf.
+ Stop build-depend on dh-buildinfo: Effectively unused.
+ Stop build-depend on libtrio: Unused upstream since 9.18.
* Update copyright info:
+ Wrap-and-sort.
+ Extend coverage of Debian packaging. Drop unneeded copyrigh signs.
+ Fix files section licensed as AGPL-3+ (no longer GPL-3+).
+ Use semantic linefeeds.
* Update symbols tracking:
+ Drop 19 private symbols.
+ Add 59 private symbols.
* Add more bug-closures to previous release 9.25~dfsg-1~exp1.
-- Jonas Smedegaard <email address hidden> Sat, 15 Sep 2018 12:30:33 +0200
-
ghostscript (9.22~dfsg-3) unstable; urgency=high
* Add patches cherry-picked upstream to fix execution issues:
+ Properly apply file permissions to .tempfile.
+ Don't just assume an object is a t_(a)struct.
+ Fix handling of pre-SAFER opened files.
+ Properly check return value when getting value from a dictionary.
+ Handle LockDistillerParams not being a boolean.
+ Fix shading_param incomplete type checking.
+ Ensure the correct is in place before cleanup.
+ Check the restore operand type.
+ Fix memory corruption in aesdecode.
+ Fix handle stack overflow during error handling.
+ Avoid sharing pointers between pdf14 compositors.
+ Improve restore robustness.
+ Hide the .shfill operator.
Closes: Bug#907332. Thanks to Nicolas Braud-Santoni.
* Use package section optional (not extra).
* Extend lintian overrides regarding License-Reference.
* Declare compliance with Debian Policy 4.2.0.
-- Jonas Smedegaard <email address hidden> Tue, 28 Aug 2018 00:05:05 +0200
-
ghostscript (9.22~dfsg-2.1) unstable; urgency=medium
* Non-maintainer upload.
* Buffer overflow in fill_threshold_buffer (CVE-2016-10317)
(Closes: #860869)
* pdfwrite - Guard against trying to output an infinite number
(CVE-2018-10194) (Closes: #896069)
-- Salvatore Bonaccorso <email address hidden> Fri, 20 Apr 2018 12:28:29 +0200
-
ghostscript (9.22~dfsg-2) unstable; urgency=medium
* Update Vcs-* fields for the move to salsa.d.o
-- Didier Raboud <email address hidden> Sat, 10 Feb 2018 17:41:31 +0100
-
ghostscript (9.22~dfsg-1) unstable; urgency=medium
[ upstream ]
* New release.
Highlights:
+ Ghostscript can now consume and produce (via the pdfwrite device)
PDF 2.0 compliant files.
+ The main focus of this release has been security and code
cleanliness. Hence many AddressSanitizer, Valgrind and Coverity
issues have been addressed.
+ The usual round of bug fixes, compatibility changes, and
incremental improvements.
[ Jonas Smedegaard ]
* Update copyright info:
+ Update paths of files to strip from upstream source.
+ Stop strip ConvertUTF files when repackaging upstream source: No
longer included upstream.
* Update watch file: Use substitution strings.
* Update package relations:
+ Relax to build-depend unversioned on liblcms2-dev d-shlibs cdbs:
Needed versions satisfied even in oldstable
* Tighten lintian overrides regarding License-Reference.
* Use https protocol for upstream Homepage.
* Declare compliance with Debian Policy 4.1.1.
* Drop patches applied upstream.
* Unfuzz patches.
* Update symbols file.
-- Jonas Smedegaard <email address hidden> Wed, 04 Oct 2017 17:13:06 +0200
-
ghostscript (9.21~dfsg-1) unstable; urgency=medium
[ upstream ]
* New release.
Highlights:
+ pdfwrite preserves annotations from input PDFs where possible.
+ GhostXPS pass required data to pdfwrite to emit a ToUnicode CMap,
resulting in fully searchable PDFs created from XPS in most cases.
+ Allow default color space for PDF transparency blends.
+ Improved support for cross-compiling in configure script.
+ tiffscaled and tiffscaled4 supports ETS (Even Tone Screening).
+ toolbin/pdf_info.ps utility emits PDF XML metadata.
+ New scan converter, more performant with large and complex paths.
[ Jonas Smedegaard ]
* Modernize cdbs:
+ Do copyright-check in maintainer script (not during build).
* Avoid compressing pdf documentation.
* Revive git-ignore file, lost importing NMUs.
* Update watch file: Fix track releases (not tags).
* Update copyright info:
+ Fix update main Files section to include all directory wildcards
declared in root LICENSE file.
+ Stop track files no longer shipped upstream.
+ Add copyright holder Raph Levien.
+ Extend coverage for main upstream author.
+ Use https protocol in format string.
* Update patches:
+ Drop patches applied upstream.
+ Normalize patch names.
+ Tidy DEP3 patch headers.
+ Add patch cherry-picked upstream to fix the shared openjpeg build.
+ Add patch cherry-picked upstream to fix shared lib build with
openjpeg >= 2.1.1, replacing patch 1001.
* Update package relations:
+ Relax build-dependency on cdbs.
+ Stop build-depend on licensecheck libregexp-assemble-perl
libimage-exiftool-perl libfont-ttf-perl.
* Relax symbols check when targeting experimental.
* Update symbols: 16 dropped. 37 added.
* Declare compliance with Debian Policy 4.0.0.
-- Jonas Smedegaard <email address hidden> Mon, 19 Jun 2017 19:19:55 +0200
-
ghostscript (9.20~dfsg-3.2) unstable; urgency=medium
* Non-maintainer upload.
* Fix regression introduced by CVE-2017-8291 fix.
When using the "DELAYBIND" feature, it turns out that .eqproc can be
called with parameters that are not both procedures. In this case, it
turns out, the expectation is for the operator to return 'false', rather
than throw an error. (Closes: #862779)
-- Salvatore Bonaccorso <email address hidden> Sun, 21 May 2017 19:22:52 +0200
-
ghostscript (9.20~dfsg-3.1) unstable; urgency=high
* Non-maintainer upload.
* -dSAFER bypass and remote command execution via a "/OutputFile (%pipe%"
substring (CVE-2017-8291) (Closes: #861295)
* use the correct param list enumerator (CVE-2017-5951) (Closes: #859696)
* fix crash with bad data supplied to makeimagedevice (CVE-2016-10220)
(Closes: #859694)
* Avoid divide by 0 in scan conversion code (CVE-2016-10219)
(Closes: #859666)
* Dont create new ctx when pdf14 device reenabled (CVE-2016-10217)
(Closes: #859662)
-- Salvatore Bonaccorso <email address hidden> Fri, 28 Apr 2017 06:50:05 +0200
-
ghostscript (9.20~dfsg-3) unstable; urgency=medium
* Fix NULL pointer dereference in mem_get_bits_rectangle().
Closes: Bug#697676 (CVE-2017-7207). Thanks to Salvatore Bonaccorso.
-- Jonas Smedegaard <email address hidden> Tue, 21 Mar 2017 17:20:00 +0100
-
ghostscript (9.20~dfsg-2) unstable; urgency=medium
* Add patch cherry-picked upstream to always print full PWG Raster
bitmap.
Closes: Bug#843095. Thanks to Brian Potkin.
* Modernize Vcs-Browser field: Use git subdir (not cgit).
* Stop override lintian for
package-needs-versioned-debhelper-build-depends: Fixed in lintian.
* Update watch file: Use github pattern from documentation.
* Update copyright info: Extend coverage of Debian packaging.
* Git-ignore quilt .pc subdir.
* Revert to not have git import-orig use merge-strategy replace.
-- Jonas Smedegaard <email address hidden> Wed, 25 Jan 2017 05:26:10 +0100
-
ghostscript (9.20~dfsg-1) unstable; urgency=medium
* Fix spelling error in chengelog entry for 9.19~dfsg-3.1.
* Adjust symbols (Fix version. Synv with experimental builds.
-- Jonas Smedegaard <email address hidden> Tue, 29 Nov 2016 03:21:17 +0100
-
ghostscript (9.19~dfsg-3.1) unstable; urgency=medium
* Non-maintainer upload.
* CVE-2013-5653: Information disclosure through getenv, filenameforall
(Closes: #839118)
* CVE-2016-7976: Various userparams allow %pipe% in paths, allowing remote
shell command execution (Closes: #839260)
* CVE-2016-7977: .libfile doesn't check PermitFileReading array, allowing
remote file disclosure (Closes: #839841)
* CVE-2016-7978: reference leak in .setdevice allows use-after-free and
remote code execution (Closes: #839845)
* CVE-2016-7979: type confusion in .initialize_dsc_parser allows remote code
execution (Closes: #839846)
* CVE-2016-8602: check for sufficient params in .sethalftone5 and param
types (Closes: #840451)
* Add 840691-Fix-.locksafe.patch patch.
Fixes regression seen with zathura and evince. Fix .locksafe. We need to
.forceput the defintion of getenv into systemdict.
Thanks to Edgar Fuß <email address hidden>
-- Salvatore Bonaccorso <email address hidden> Thu, 27 Oct 2016 13:25:52 +0200
-
ghostscript (9.19~dfsg-3) unstable; urgency=medium
* Avoid merging same-licensed sections in copyright_hints.
* Fix typo in old changelog entry.
* Skip copyright-check of non-metadata-parseable binary files.
* Update copyright info:
+ Fix licensing of a few drivers to be GPL-2+.
+ Fix licensing of a base files to be FTL.
+ Update source URL.
* Update watch file:
+ Fix handle prereleases.
+ Use Github URL (but not common pattern: default tarball is bogus).
+ Mention gpb --uscan in usage comment.
* Modernize git-buildpackage config: Filter any .git* file.
* Have library and headers support multi-arch.
Closes: Bug#770266. Thanks to Andreas Beckmann, Till Kamppeter and
Matthias Klose.
-- Jonas Smedegaard <email address hidden> Thu, 22 Sep 2016 12:08:56 +0200
-
ghostscript (9.19~dfsg-2) unstable; urgency=medium
* Modernize cdbs use. Tighten build-dependency on cdbs.
* Declare compliance with Debian Policy 3.9.8.
* Update watch file: Fix avoid use of uupdate (unneeded with gbp).
* Build-depend on licensecheck (not devscripts).
* Add patch 1001 to fix a FTBFS against libopenjp2-7 2.1.1 and newer.
Closes: Bug#832873.
Thanks to Didier 'OdyX' Raboud.
-- Jonas Smedegaard <email address hidden> Thu, 11 Aug 2016 14:09:12 +0200
-
ghostscript (9.19~dfsg-1) unstable; urgency=medium
[ upstream ]
* New release.
Highlights:
+ New custom PJL (near) equivalents for pdfmark and
setdistillerparams.
+ Metadata pdfmark implemented.
+ Add experimental, rudimentary raster trapping implementation.
+ Improved halftone threshold array generation tools.
Other changes relevant for Debian:
+ copy_alpha now supports 8 bit depth (as well as 2 and 4).
[ Jonas Smedegaard ]
* Update watch file:
+ Bump file format to version 4.
+ Update upstream source URL.
+ Add repacksuffix hint.
+ Use uversionmangle (not dversionmangle) to adjust prereleases.
* Drop CDBS get-orig-source target: Use "gbp import-orig --uscan"
instead.
* Update copyright info:
+ Update source URL.
+ Expand reasons for repackaging.
* Add patch cherry-picked upstream to have configure support
--without-pcl and --without-xps.
* Configure --without-pcl (instead of moving aside pcl dir during
build).
-- Jonas Smedegaard <email address hidden> Thu, 24 Mar 2016 18:19:43 +0100
-
ghostscript (9.18~dfsg-4) unstable; urgency=medium
* Really mark leaked png symbol as optional (not simply remove it, as
it may then silently reappear as happened with 2.18~dfsg release).
Closes: bug#809939. Thanks to Tobias Frost.
* Add patch cherry-picked upstream to fix xpswrite/gprf builds with
shared zlib (replacing patch 1002).
* Add patch cherry-picked upstream to fix add gserrors.h to the
installed files for the so-install target.
Closes: Bug#814882. Thanks to Jean-Luc Coulon.
* Recommend fonts-droid-fallback (not fonts-droid now dropped).
Closes: Bug#804684. Thanks to Daniel Serpell.
-- Jonas Smedegaard <email address hidden> Tue, 16 Feb 2016 20:59:55 +0100
-
ghostscript (9.18~dfsg-3) unstable; urgency=medium
* Fix use space (not comma) as arch delimiter in symbols file.
Thanks to John Paul Adrian Glaubitz
-- Jonas Smedegaard <email address hidden> Mon, 15 Feb 2016 16:53:25 +0100
-
ghostscript (9.16~dfsg-2.1) unstable; urgency=medium
* Non-maintainer upload.
* Remove leaked png_push_fill_buffer symbol from symbol files
to build with libpng1.6 (Closes: #809939)
-- Tobias Frost <email address hidden> Wed, 27 Jan 2016 19:39:05 +0100
-
ghostscript (9.16~dfsg-2) unstable; urgency=medium
* Fix lintian overrides.
* Bump debhelper compatibility level to 9.
* Suppress lintian warning about build-depending unversioned on
debhelper.
* Enable support for parallel building.
-- Jonas Smedegaard <email address hidden> Sat, 01 Aug 2015 19:05:30 +0200
-
ghostscript (9.16~dfsg-1) unstable; urgency=medium
[ upstream ]
* New release 9.07.
Highlights:
+ Add -dLockColorants option for tiffsep and psdcmyk devices.
+ Improved high level devices handling of Forms.
+ Update URW+ Nimbus* fonts, adding Greek and Cyrillic glyphs.
[ Jonas Smedegaard ]
* Add patch 2010 to allow the build timestamp to be externally set.
Closes: Bug#794004. Thanks to Peter De Wachter and Eduard Sanou.
* Update copyright info:
+ Extend coverage for main upstream authors to include current year.
* Add patch 1002 to fix have devxps link against shared zlib.
* Unfuzz patches.
* Update symbols file (30 new).
-- Jonas Smedegaard <email address hidden> Fri, 31 Jul 2015 23:00:24 +0200
-
ghostscript (9.15~dfsg-1) unstable; urgency=medium
[ upstream ]
* New release 9.07.
Highlights:
+ Licensing changed to GNU Affero General Public License (AGPL).
+ Ghostscript now has the option to be built as thread safe.
+ The pdfwrite devices now supports linearized (or optimized for
fast web view) output directly.
+ Supports Postscript string and array objects with >64k entries.
+ Supports file sizes >4Gb - in particular reading and writing PDF
files, and as side effect supports 64 bit Postscript integer
objects.
+ All CMYK devices supports simulated overprint of spot colors.
+ Support for use of DeviceN ICC color profiles as the output
profile with the tiffsep and psdcmyk devices.
+ Support for customized named color handling with DeviceN colors.
+ Support for black point compensation.
+ Support for K preservation in CMYK to CMYK conversions.
+ Support for DeviceLink profiles for graphic, image and text
objects.
+ Support for custom color replacement.
+ Increased control in specifying color conversions as a function of
object type.
+ Provide BigTIFF output option, when linked against recent libtiff.
+ LittleCMS updated to 2.4 [Debian instead links to shared lib].
Closes: bug#531624. Thanks to Moritz Muehlenhoff and Bastien
Roucaries.
* New releases 9.09 and 9.10.
Highlights:
+ New Background printing (BGPrint) feature to speedup processing of
certain classes of files.
+ New GrayDetection feature to detect and convert nearly-grey color
input to grayscale for some drivers.
+ Misc. improvements for Windows environments.
+ Updated URW Postscript font set, fixing compatibility problems
with the Adobe fonts [Debian uses separately packaged fonts].
* New release 9.14.
Highlights:
+ pdfwrite now uses same color management as for rendering devices.
+ New device 'eps2write' to create EPS files using ps2write.
+ Support customisation of output for specific devices.
+ Reduced memory usage processing PDF with transparency to either
display device or high level vector non-transparency devices like
ps2write or pdfwrite when 'flattening' to PDF 1.3 or earlier.
+ New --saved-page option to spool and render in arbitrary order.
+ Improved performance by more extensive use of multiple threads.
+ New device 'pwgraster' to render for PWG Raster output.
+ CUPS device improved support for PPD-less printing.
* New release 9.15.
Highlights:
+ Support for PDF security handler revision 6.
+ New -dNoOutputFonts for pdfwrite and ps2write (and related).
+ New PostScript pageneutralcolor state to resolve color/grayscale.
+ pdfwrite device supports Link annotations.
+ pdfwrite device supports BMC/BDC/EMC pdfmarks.
+ New LCMS2-based color management also applies to PDF/A-1 output.
[ Jonas Smedegaard ]
* Update copyright info:
+ Extend coverage a few places to include recent years.
+ Change main license to "AGPL-3+~Artifex".
+ Update main fonts to author "(URW)++" and license
"AGPL-3+~Artifex with font exception".
+ Extend coverage for packaging, and relicense as GPL-3+.
+ Drop Files section for documentation files not shipped since 9.05.
+ Fix include verbatim exceptions in license section (not comment).
+ Only comment on (not formally declare) unused AFPL license.
+ Merge bogus dual-licensing of (two wording of) LGPL-2.1+.
+ Drop Files sections for excluded autotools files.
+ Fix stop bogusly list as specially licensed the files
examples/waterfal.ps contrib/japanese/doc/gdevdmpr.txt
toolbin/localcluster/dashboard.html.
+ Use License-Grant and License-Reference fields.
Thanks to Ben Finney.
+ Use license short-name public-domain.
* Update repackaging:
+ Strip convenience library trio from upstream source.
+ Strip DFSG-nonfree ETS halftone code from upstream source.
+ Strip example code lacking license.
+ Strip contributed documentation possibly lacking license.
+ Strip from repackaged upstream tarball ramfs code lacking license
according to <http://www.ghostscript.com/irclogs/2014/05/05.html>.
+ Stop strip jasper project: not shipped since 9.07.
+ Reflect files moved from base/ to devices/.
+ Stop documenting CUPS filters dropped since 9.09.
* Update patches:
+ Drop cherry-picked patches now included with upstream release.
+ Add patch cherry-picked upstream to sanity check for memory
allocation.
Closes: Bug#793489 (CVE-2015-3228). Thanks to Raphael Hertzog.
+ Add patch 2009 to not link against stripped ramfs code.
+ Unfuzz all patches.
* Update package relations:
+ Build-depend on recent libopenjpeg-dev (not libjasper-dev):
Support for JasPer has been dropped upstream.
+ Tighten build-dependency on liblcms2-dev: We need threads support.
+ Build-depend on libtrio-dev.
+ Tighten to build-depend on d-shlibs handling libtrio quirk.
+ Relax to build-depend unversioned on libopenjpeg-dev: Needed
version satisified even in oldstable.
+ Relax to depend unversioned on poppler-data, and drop
fallback-dependency on gs-cjk-resource: Needed version satisified
even in oldstable.
+ Drop bogus/ancient fallback-build-dependency on libglut-dev.
* Add d-shlibmove override for libtrio.
* Add news entry about licensing change to AGPL.
Thanks to Jonathan Nieder.
* Update symbols file (208 new, 70 dropped).
* Temporarily adjust source URLs for upstream pre-release.
* Have license-check skip main HTML documentation.
* Add lintian overrides regarding license in License-Reference field.
See bug#786450.
* Declare compliance with Debian Policy 3.9.6.
-- Jonas Smedegaard <email address hidden> Sun, 26 Jul 2015 17:34:11 +0200
-
ghostscript (9.06~dfsg-2) unstable; urgency=medium
* Add patch cherry-picked from Ghostscript 9.14 (AGPL) to fix /typecheck error in
/findfont. Mention the explicit agreement to include that patch in a GPL
Ghostscript in the patch description from the original author.
(Closes: #732440)
* Ack NMU, thanks!
-- Didier Raboud <email address hidden> Fri, 09 Jan 2015 15:49:21 +0100
-
ghostscript (9.06~dfsg-1.1) unstable; urgency=low
* Non-maintainer upload.
* Symbols file: add mips64 and mips64el to 64bit list;
mips64el and mipsn32el to le arch list to file. (Closes: 727179)
-- YunQiang Su <email address hidden> Tue, 14 Oct 2014 16:25:54 +0800
-
ghostscript (9.06~dfsg-1) unstable; urgency=medium
* Team upload
[ upstream ]
* New release.
Highlights:
+ PDF/A-2 - pdfwrite now supports the creation of PDF/A-2 files.
+ pdfwrite "Server mode" - pdfwrite can now be run in "server mode".
+ pdfwrite now supports the "%d" format in the OutputFile switch.
+ ps2write now emits PostScript in slightly different ways in order
to produce output on a wider variety of devices.
+ Ghostscript can now use output intents defined in PDFs.
+ tiffsep/tiffsep1: support for large numbers of separations
improved.
+ tiffsep, psdcmyk and psdrgb now support the "downscaler"
functionality.
+ clist storage, for rendering pages in bands, is now a run-time
option.
[ Jonas Smedegaard ]
* Update copyright file:
+ Fix merge some Files entries.
+ Tidy copyright holders to match new upstream release.
+ List upstream develpment mailinglist as preferred upstream
contact.
* Update repackaging:
+ Strip icclib.
Drop corresponding entries in copyright file.
Drop patch for CVE-2012-4405.
+ Stop strip CMap file Identity-UTF16-H: Explicitly declared in
LICENSE (with a double negative) as GPL-3+~Artifex licensed.
+ Stop strip CMap files: not shipped since 9.06.
* Drop patches 0* now included upstream and 1* adopted upstream.
* Unfuzz all patches, and update patch 2003.
* Update package relations:
+ Build-depend on recent libopenjpeg-dev (not libjasper-dev):
JasPer support deprecated (will be dropped in 9.07).
+ Build-depend on libregexp-assemble-perl, libfont-ttf-perl and
libimage-exiftool-perl: Needed for extracting metadata from ICC,
PDF, and fonts.
+ Stop build-depending on liblcms1-dev: icc34.h now included
upstream (outside of the convenience code copy of lcms1 project).
Closes: Bug#745529. Thanks to Moritz Muehlenhoff.
+ Stop build-depending on libdbus-1-dev: CUPS filters no longer
built.
+ Stop suggesting hpijs: Correct would be for said package (or
rather its successor printer-driver-hpijs - or any add-on driver)
to declare "Enhances: ghostscript" instead.
* Disable broken omni driver.
* Use canonical hostname (anonscm.debian.org) in Vcs-Git URI.
* Add patch 1001 to document inkcov device.
* Extract metadata from ICC, PDF, and truetype files before copyright
check.
* Stop building CUPS filters, and drop binary package
ghostscript-cups: Ghostscript-based CUPS filters obsolete (will be
dropped upstream in 9.09).
Closes: bug#735612. Thanks to Adrian Bunk and Didier 'OdyX' Raboud.
* Avoid building CUPS driver or checking symbols file when
bootstrapping an architecture.
Closes: bug#717827. Thanks to Matthias Klose and Daniel Schepler.
* Update Vcs-* fields: Packaging git moved to printing area of Alioth.
* Stop explicitly xz-compressing binary packages: Done by default now.
* Fix avoid hardcoded (and broken, by now) ABI in fallback font path.
* Document in README.Debian linkage against unpatched OpenJPEG (i.e.
lacking JPEG2000 color calibration) in README.Debian.
* Move ICC profiles to shared dir, to allow reuse by others.
* Bump standards-version to 3.9.5.
* Update symbols file (79 new, 29 dropped).
* Add patch cherry-picked upstream, to avoid icclib.
Closes: Bug#531624. Thanks to Moritz Muehlenhoff.
[ Didier Raboud ]
* Add libjasper-dev as Build-Depend, let the two symbols back in
* Ack NMU, thanks!
-- Didier Raboud <email address hidden> Tue, 26 Aug 2014 19:08:41 -0700
-
ghostscript (9.05~dfsg-9.1) unstable; urgency=low
* Non-maintainer upload.
* Add ppc64el to symbols file. Closes: #751917
-- Andreas Barth <email address hidden> Sun, 17 Aug 2014 10:03:39 +0000
-
ghostscript (9.05~dfsg-9) unstable; urgency=medium
* Update my email address.
* Build against lcms2 (closes: #745529).
-- Michael Gilbert <email address hidden> Fri, 08 Aug 2014 00:59:38 +0000
-
ghostscript (9.05~dfsg-8.1) unstable; urgency=low
* Non-maintainer upload.
* Add arm64 to symbols file. Thanks to Matthias Klose (Closes: #717826)
* Fix gs/ps typo in clean target preventing rebuilds (Closes: #733018)
-- Wookey <email address hidden> Mon, 07 Apr 2014 02:37:59 +0000
-
ghostscript (9.05~dfsg-8) unstable; urgency=medium
* Add patches to fix endless loops related to unbalanced q/Q
operators.
Closes: bug#714247. Thanks to Paul Wise.
* Add patch to fix apply colord icc profile to ghostscript-cups
(deliberately skipping related patch for calibration prints not
applying to Ghostscript 9.05).
Closes: bug#712045. Thanks to Alexey Galakhov.
* Add patch to fix encode pdf metadata in compliance with pdf
standard. Closes: bug#694067. Thanks to Paul Menzel.
* Set urgency=medium: bug#714247 causes remote denial-of-service.
-- Jonas Smedegaard <email address hidden> Thu, 04 Jul 2013 15:57:57 +0200
-
ghostscript (9.05~dfsg-6.3) unstable; urgency=low
* Non-maintainer upload.
* Replace the PPD-updater postinst by CUPS' trigger (Closes: #520753)
- Breaks against too old cups versions.
- Add a ppd-updater file, to trigger with parameters.
* Add patch from upstream bug #693208 to improve error feedback (when
we can). (Closes: #682407)
-- Didier Raboud <email address hidden> Sun, 25 Nov 2012 14:39:30 +0100
-
ghostscript (9.05~dfsg-6.2) unstable; urgency=medium
* Check for the existence of /etc/cups/ppd in ghostscript-cups.postinst
(closes: #520753)
- Patch thanks to Bastien Roucaries.
* Remove /etc/gs-gpl files that may have been left around during the
etch to lenny upgrade (closes: #475873)
- Patch thanks to Didier Raboud.
-- Michael Gilbert <email address hidden> Sat, 27 Oct 2012 05:46:49 -0400
-
ghostscript (9.05~dfsg-6.1) unstable; urgency=high
* Non-maintainer upload.
* Apply security patch for CVE-2012-4405 (Closes: #687274): error out if
inputChan is strictly less than 1 in icmLut_read(), thanks to Nico
Golde for the pointers.
* Enable xz compression for all binaries (Closes: #687300).
-- Cyril Brulebois <email address hidden> Sat, 22 Sep 2012 01:18:12 +0200
-
ghostscript (9.05~dfsg-6) unstable; urgency=low
* Fix symlink to DroidSans.
Closes: bug#661764. Thanks to Ian Zimmerman.
* Have libgs9 depend on recent poppler-data favored over
gs-cjk-resource.
-- Jonas Smedegaard <email address hidden> Thu, 24 May 2012 20:02:18 +0200
-
ghostscript (9.05~dfsg-5) unstable; urgency=low
* Add patch from upstream to fix endian issue with lcms2 i/face.
-- Jonas Smedegaard <email address hidden> Fri, 27 Apr 2012 12:32:47 +0200
-
ghostscript (9.05~dfsg-4) unstable; urgency=low
* Add patch from upstream to workaround Brother printer CCITTFaxDecode
bugs.
Closes: bug#664966. Thanks to Vincent Bernat.
* Use anonscm.debian.org URL in Vcs-Browser field.
* Update copyright file:
+ Double-indent in Files-Excluded field.
+ Newline-delimit a Files list.
-- Jonas Smedegaard <email address hidden> Thu, 22 Mar 2012 22:02:29 +0100
-
ghostscript (9.05~dfsg-3) unstable; urgency=low
* Bump standards-version to 3.9.3.
* Bump copyright file format to 1.0.
* Document use of fonts-droid in README.Debian and long description of
libgs9-common.
See bug#661764. Thanks to Ian Zimmerman and Jonathan Nieder.
* Add patch from upstream VCS to not hack the libjpeg mem manager.
Closes: bug#653061. Thanks to Chris Liddell and others.
* Update copyright file:
+ Fix double-indent successive copyright lines in copyright file, as
required for "formatted text" fields.
+ Drop duplicate copyright holder.
* Update symbols file.
* Stop explicitly and unconditionally appending -fPIC to CFLAGS:
Better handled upstream for some time now.
-- Jonas Smedegaard <email address hidden> Sat, 03 Mar 2012 13:46:38 +0100
-
ghostscript (9.05~dfsg-2) unstable; urgency=low
* Recommend fonts-droid (not ship DroidSansFallback.ttf).
* Avoid ghostscript-x maintainer scripts invoking ldconfig.
* Add patch 1001 to fix typo in german manpage.
* Unfuzz and enable patch 1002 (mostly cosmetic, to have it appear at
http://patch-tracker.debian.org/).
-- Jonas Smedegaard <email address hidden> Sun, 12 Feb 2012 15:48:23 +0100
-
ghostscript (9.05~dfsg-1) unstable; urgency=low
* New upstream release.
* Update copyright file:
+ Improve Copyright shortnames:
- BSD → BSD-3-Clause
- MIT~Open → NTP~Open
- MIT~WSU → NTP~WSU
- MIT~Lucent → NTP~Lucent
- other-Adobe → BSD-3-Clause~Adobe
+ Fix merge double Files-Excluded, and list globbing before specific
files.
+ Quote licenses in Comment fields.
+ Drop duplicate Comment fields.
+ Fix refer to license shortname AFPL~AFPL (not AFPL).
+ Extend copyright years.
+ Add new Files section, Apache-2.0 licensed (TrueType file, not
linked code so not challenging GPL).
+ Drop a few Files sections and a License section.
* strip convenience library openjpeg from upstream source.
* Imported Upstream version 9.05~dfsg
* Drop patches 020110819 and 1001, applied upstream.
* Explicitly disable use of openjpeg: Now preferred if available but
requires patching for ICC and CMYK support.
* Update symbols file.
-- Jonas Smedegaard <email address hidden> Fri, 10 Feb 2012 19:27:35 +0100
-
ghostscript (9.04~dfsg-3) unstable; urgency=low
[ Steve Langasek ]
* Mark ghostscript Multi-Arch: foreign, so that the package manager knows
the package satisfies dependencies and build-dependencies of packages
regardless of architecture.
* Drop gs-gpl package: it was already a transitional package in lenny,
and html2ps in squeeze is the last package to recommend it (nothing in
wheezy references it).
* Eliminate the gs provides; nothing in squeeze or wheezy references it.
* Drop gs-common package: it was also transitional from lenny on, and
latexmk in wheezy is the last package to reference it as a Suggests
only.
Closes: bug#646870. Thanks to Jakub Wilk and Didier Raboud.
[ Jonas Smedegaard ]
* Update copyright file: Fix add missing copyright paragraph.
Thanks to lintian.
* Drop transitional Replaces: affecting only testing.
-- Jonas Smedegaard <email address hidden> Thu, 24 Nov 2011 13:01:31 +0700
-
ghostscript (9.04~dfsg-2) unstable; urgency=low
* Update copyright file:
+ Fix add dot in horisontal space of license MIT~Lucent.
Thanks to lintian.
* Suppress bogus d-shlibs resolving of ld1-dev: Fixes FTBFS.
Thanks to Pino Toscano.
-- Jonas Smedegaard <email address hidden> Mon, 03 Oct 2011 00:20:56 +0200
-
ghostscript (9.04~dfsg-1) unstable; urgency=low
* New upstream release.
Closes: bug#597833. Thanks to Till Kamppeter and Kurt Roeckx.
* Exclude lcms2 from repackaged source.
* Update patches:
+ Drop patches cherry-picked from upstream Git: Applied upstream
now.
+ Unfuzz patch 2001.
+ Add patch cherry-picked upstream to add sys/time.h definition
only once.
+ Add patch 1001 to autoconfigure choice of CMS in use (not hardcode
to lcms 1.x).
+ Add patch 1002 to fix a few comment typos in CMS-related
makefiles.
+ Add patch 2003 to include multiarch paths, fixing FTBFS.
Closes: bug#639073. Thanks to Philippe Le Brouster.
* Fix FTBFS on s390: Adjust symbols file.
Closes: bug#636546. Thanks to Aurelien Jarno.
* Link against lcms2 (not lcms1).
Regenerate autoconf during build (needed for patch 1001).
Build-depend on autoconf.
Build-depend on liblcms1-dev (in addition to liblcms2-dev): Provides
needed icc34.h header.
* Let CUPS rasterizer link against D-Bus. Build-depend on
libdbus-1-dev, and recommend colord.
* Improve ghostscript-cups postinst:
+ Limit lp* commands to localhost to avoid hanging. See bug#543468.
Thanks to Till Kamppeter.
+ Trap non-numeric signals, and also ILL and ABRT (not only HUP INT
QUIT PIPE TERM).
Thanks to Till Kamppeter.
* Improve ghostscript preinst:
+ Purge obsolete defoma cruft to silence warnings.
Thanks to Till Kamppeter.
* Silence iccprofiles and example PDFs from copyright tracking.
* Include configure flag --with-install-cups.
* Update package relations:
+ Relax build-dependency on cdbs (unneededly tight).
+ Relax build-depend unversioned on debhelper and devscripts (needed
versions satisfied even in oldstable).
* Fix (really really this time) drop cidfmap in Init dir if virtually
empty.
Closes: bug#531182, #618354. Thanks to Youhei SASAKI and Mitsuya
Shibata.
* Update symbols files.
-- Jonas Smedegaard <email address hidden> Sun, 02 Oct 2011 15:42:48 +0200
-
ghostscript (9.02~dfsg-3) unstable; urgency=low
* Tighten build-dependency on d-shlibs and drop overrides. Closes: bug#629967, thanks to Bill Allombert. -- Jonas Smedegaard <email address hidden> Thu, 07 Jul 2011 22:52:03 +0200
-
ghostscript (9.02~dfsg-2) unstable; urgency=low
* Cherry-pick upstream fixes for severe bugs. + Fix for x11alpha device when the source file has transparency. Closes: bug#567673. Thanks to Markus Steinborn. + Fix segfault with -dDOINTERPOLATE. + Fix crashing bug in PostScript colour handling. + Fix potential SEGV ICC-parsing e.g. Photoshop CMYK EPS. + Fix crash in tiffsep device when COMPILE_INITS=0. * Update copyright file: + Separate non-verbatim part of License fields into Comment fields. + Strip Files section for no longer included m4 files, and corresponding License section. + Fix list exceptions as such (not as or'ed licenses). + Fix license section lgpl-2.1+ to use verbatim text, and properly refer to 'Lesser' (not 'Library'). + Fix use separate License sections for variations, to obey Policy requirement of including the texts verbatim. + Rename license shortnames using ~ to indicate derived-from-common. + Fix state 'None' as copyright for a PD (non-)license. + Fix license section comments for LGPL-2.1+ to refer to LGPL at FSF address (not GPL). + Rewrap license fields at 72 chars, and shorten comments. + Fix and tidy references to AFPL licenses. + Add a bunch of newly examined copyright holders and (mostly GPL and MIT-derived) licenses. + Bump format to draft 174 of DEP-5. * Bump policy compliance to standards-version 3.9.2. -- Jonas Smedegaard <email address hidden> Sun, 24 Apr 2011 02:02:43 +0200
-
ghostscript (9.02~dfsg-1) unstable; urgency=low
* New upstream release. Closes: bug#620970. Thanks to Daniel Baumann. + Fixes crash in CUPS driver. Closes: bug#615202. [ Jonas Smedegaard ] * Set libgs-dev to priority optional (not extra) to match override file. * Fix have libgs* depend on lib*-common, source-versioned to ensure sanity while allow binNMUs. Thanks to Niels Thykier. * Drop obsolete lintian overrides. * Fix stop stripping convenience library icclib from upstream source: Linkage against shared system library was not applied and is not yet working. * Update upstream download URL. Tidy note on DFSG repackaging copyright file. * Drop patches 0001 and 1001: Applied upstream. * Update copyright file: + (Re)add licensing of icclib. + Fix treat SunSoft part as exception (not separate license). + Reorder Files sections to match hints file. + Add new owners. * Update symbols files. [ Didier Raboud ] * Add a -dbg package. Closes: #616024. -- Jonas Smedegaard <email address hidden> Sat, 09 Apr 2011 06:56:28 +0200
-
ghostscript (9.01~dfsg-2) unstable; urgency=low
* Really have ghostscript-cups and libgs9-common replace older ghostscript. Closes: bug#614729. Thanks to Colin Watson. * Add patch 0001 to fix bus error on sparc. Closes: bug#613642. Thanks to Julien Cristau, Chris Liddell and others. * Update copyright file: Extend a year. -- Jonas Smedegaard <email address hidden> Fri, 25 Feb 2011 00:08:29 +0100
-
ghostscript (9.01~dfsg-1) unstable; urgency=low
* New upstream release. + Drop cherry-picked and adopted patches. Thanks to Till Kamppeter! * Enable new FAPI (Freetype-based font rasterizer). Build-depend on libfreetype6-dev. * Strip additional libraries from repackaged source: + cups/libs: unneeded convenience library. + jpeg: convenience library used for broken JPEG (see bug#582521). + jpegxr: patented controversial JPEG XR convenience library. * Stop custom-handling upstream-shipped patch noise or autotools files: Properly shipped upstream now. Stop build-depending on autotools-dev or autoconf. * Update copyright file: + Extend copyright years. + Drop notes on no longer shipped jpeg files. * Update README.Debian: + Drop mentioning old merge of gs-gpl, gs-esp, and gs-common. + Drop note on files stripped from repackaged source: More accurate list provided in README.source for some time now. + Refer to bug#582521 regarding use of shared JPEG library. + Drop section on no longer used DeFoMa. + Fix Project name, and update trailing timestamp and author. * Fix move empty-cidfmap safety-check after binary-install targets. * Add patch 1001 to fix hashbang of cidfmap file: accidentally garbled upstream. * Update symbols file. * Fix build-depend on libijs-dev, to get back IJS support accidentally removed since 9.00~dfsg-1. Add libijs quirk to s-shlibs invocation. * Build-depend on libidn11-dev, to support Unicode passwords. * Drop no longer needed configure option --disable-cairo. * Override lintian false positive: libgsN != libgsN-common. -- Jonas Smedegaard <email address hidden> Sat, 12 Feb 2011 22:22:40 +0100
-
ghostscript (8.71~dfsg2-10) unstable; urgency=medium
* Fix drop libgs8 superfluous Breaks: on ghostscript. -- Jonas Smedegaard <email address hidden> Fri, 28 Jan 2011 00:09:41 +0100
-
ghostscript (8.71~dfsg2-9) unstable; urgency=low
* Fix merge in 8.71~dfsg2-6.1 (not unreleased 8.71~dfsg2-7). * Fix strip CMap files in target related to libgs8 (not ghostscript). * Package now team-maintained: + Set Debian Printing Team as author. + Set myself and Add Michael Gilbert as uploaders. Welcome, Michael! + Drop Masayuki Hatta and Torsten Landschoff as uploaders, reflecting the sad reality of them going silent. Thanks for past contributions, and feel free to join back later! -- Jonas Smedegaard <email address hidden> Wed, 26 Jan 2011 02:38:59 +0100
-
ghostscript (8.71~dfsg2-8) unstable; urgency=low
* Update VCS hints to track squeeze-targeted branch. * Sync control.in with control: + Add Michael Gilbert as uploader. + Newline-delimit uploaders. * Fix install arch-independent files in library package: they are needed by library calls (not only by executables): + Install /usr/share/ghostscript/* into libgs8. + Install empty dir var/lib/ghostscript/CMap into libgs8 (as well as into ghostscript where install scripts depend on it) as it is used by symlink. + Have libgs8 break and replace older ghostscript. Closes: bug#485621, thanks to Tom Parker and others. -- Jonas Smedegaard <email address hidden> Sun, 23 Jan 2011 16:12:44 +0100
-
ghostscript (8.71~dfsg2-6.1) unstable; urgency=medium
* Non-maintainer upload. * Fix various aspects of CVE-2010-2055: - Honor -P- command-line option (closes: #584653). - Set SEARCH_HERE_FIRST=0 by default (closes: #584663). -- Michael Gilbert <email address hidden> Thu, 09 Dec 2010 21:40:17 -0500
-
ghostscript (8.71~dfsg2-6) unstable; urgency=low
* Acknowledge pseudo-NMUs.
Closes: bug#584667, #584516, #583738, thanks to Moritz Muehlenhoff
and Sebastian Dröge.
* There is no such thing as a "collab-maint upload:
+ Edit historical changelog entries to avoid further repitition.
+ Document sensible use of collab-maint for NMUs in README.source.
* Reorder patches to match upstream commit order.
* Replace patches 0960-0962 (fix printing from GTK+ apps) from Ubuntu
with corresponding patches cherry-picked from upstream.
* Refresh patches using shortening options --no-timestamps --no-index
-pab.
* Bump Standards-Version to 3.9.1.
* Put myself as maintainer and Hatta as uploader, to better reflect
our current levels of activity.
* Drop superfluous cleanup in preinst of transitional gs-common.
Thanks to Jonathan Nieder (see bug#519141).
* Fix circular dependency: Stop ugly transitional hack of ghostscript
depending on gs-common (which depends on ghostscript).
Closes: bug#519141, thanks to Bill Allombert, Jonathan Nieder and
others (see also bug#539754).
* Add patch 011547 cherry-picked from upstream Subversion, to improve
cups device support for rendering with high memory demands. Possibly
fixes bug#534414 (try also setting RIPCache=auto in cupsd.conf).
-- Jonas Smedegaard <email address hidden> Thu, 19 Aug 2010 09:55:55 +0200
-
ghostscript (8.71~dfsg2-5) unstable; urgency=low
* Collab-maint upload, adding myself to uploaders temporarily
* Apply some patches from the Ubuntu package by Till Kamppeter to
fix printing from GTK+ applications. This is upstream bug #691014
and fixed upstream too (Closes: #583738).
* Refresh all patches to apply cleanly again.
-- Sebastian Dröge <email address hidden> Wed, 18 Aug 2010 09:55:39 +0200
-
ghostscript (8.71~dfsg2-4) unstable; urgency=medium
* Collab-maint upload, adding myself to uploaders temporarily
* Fix CVE-2010-1628 (Closes: #584516)
* Apply upstream commit r11351 to pass -P- to all Ghostscript
internal tools. Ghostscript will likely be changed to run
with -P- by default, but this still needs more work/testing
for a final patch (Closes: #584667)
-- Moritz Muehlenhoff <email address hidden> Sat, 31 Jul 2010 23:19:42 -0400
-
ghostscript (8.71~dfsg2-3) unstable; urgency=low
* Fix have update-gsfontmap script exit 0.
-- Jonas Smedegaard <email address hidden> Tue, 18 May 2010 17:17:14 +0200
-
ghostscript (8.71~dfsg-4) unstable; urgency=low
* Drop locally included d-shlibdeps, and instead tighten build-
dependency on d-shlibs to versions supporting inversioned -dev
package and suppressing missing library dependencies (declared
indirectly using CDBS). No longer mention d-shlibs licensing in
copyright file.
* Add patches cherry-picked from upstream VCS:
+ 0927: Write TIFF directories before the page data.
+ 0928: Change default TIFF strip size to one megabyte.
+ 0940: Merge gs_2_colors branch.
+ 0941: Include all our defined fonts in substitution list.
Register a few newly introduced symbols.
* Drop local CDBS snippet package-relations.mk: included in cdbs now.
* Simplify CDBS inclusions: We need newer version anyway due to using
package dependency handling, so useless trying to ease backporting
by avoiding other build-dependency tightenings.
* Build-depend on devscripts and dh-buildinfo, and tighten build-
dependency on cdbs.
* Fix use DEB_UPSTREAM_REPACKAGE_EXCLUDES (not abandoned
DEB_UPSTREAM_REPACKAGE_EXCLUDE) in rules file.
Closes: bug#577373, thanks to Lucas Nussbaum.
* Have ghostscript break ghostscript-x too old to depend on same-
version ghostscript.
Closes: bug#511824, thanks to Bernhard R. Link.
* Fix handle upstream-shipped temp files different from patch noise,
to really make clean target fully clean.
-- Jonas Smedegaard <email address hidden> Thu, 15 Apr 2010 21:04:02 +0200
-
ghostscript (8.71~dfsg-3) unstable; urgency=low
* Add patches cherry-picked from upstream VCS:
+ 0826: Fix some compile errors and warnings.
+ 0827: Fix possibly AIX-only compile error.
+ 0830: Always use contone buffer in wtsimdi device.
+ 0869: Open tiffsep and tiffsep1 output files as seekable.
+ 0881: Revert korean example to non-corrupted version.
+ 0882: Update Windows CJK font substitution list.
+ 0883: lowercase fontfile name before matching.
+ 0890: Fixes on CUPS Raster output device.
+ 0895: pdftoraster no exit until Ghostscript sub-process finishes.
+ 0905: Fix psdcmyk segv.
+ 0908: Fix overprint logic.
+ 0924: Fix TIFFCleanup segfault in gdevtfax.
+ 0925: Fix treat TIFFSetField as floating point.
+ 0926: Have filters return 2 on empty output.
* Refresh patches (with compacting options --no-timestamp --no-index).
* Refer to FSF website (not postal address) in rules file header.
* Fix refer to LGPL as Lesser (not Library) in copyright file.
* Update local CDBS snippets:
+ Drop conditionally setting DEB_MAINTAINER_MODE in rules file (done
in main cdbs package now), to not (wrongfully) upset lintian.
+ Drop upstream-tarball.mk, copyright-check.mk and buildinfo.mk, and
instead use same functionality now offered in main cdbs package.
+ Shrink package-relations.mk (only local snippet left!) to only
handle binary relations (other parts in main cdbs since 0.4.69).
* Drop build-depending on devscripts or dh-buildinfo (only needed in
maintainer builds), to ease backporting.
* Build-depend unversioned on d-shlibs (needed --overrides option
satisfied since oldstable).
* Update symbols file (ALWAYS_CONTONE@Base introduced in patch 0830),
and postfix earlier patch-introduced debian-versioned symbols with
"~", thanks to lintian.
-- Jonas Smedegaard <email address hidden> Mon, 15 Mar 2010 21:43:22 +0100
-
ghostscript (8.71~dfsg-2) unstable; urgency=low
* Update copyright file:
+ Fix license section GPL-2+ to add refer to actual license at
/usr/share/common-licenses/GPL-2.
+ Strip from license section other-GPL-3+-Artifex partly outdated
non-license part.
+ Fix replace bogus license section "GPL-2+ or AFPL" with AFPL one.
+ Fix change license "GPL-2+ with Autoconf exception" to "GPL-2+ or
other-sa-Autoconf", and add new license section other-sa-Autoconf.
+ Fix change license "GPL-2+ with Libtool exception" to "GPL-2+ or
other-sa-Libtool", and add new license section other-sa-Libtool.
+ Extend license section GPL-2+ to cover more variants (reducing
verbatim copies by documenting file/program/library variations).
+ Change GPL license sections to refer to FSF website (as in
py-compile, not postal address as common in other (older?) cases).
Place the website reference below Debian-specific reference to
actual license file, to slightly emphasize that it is a local edit
(not copied verbatim from an upstream file).
* Build-depend on libexpat-dev and enable SHARE_EXPAT. Closes:
bug#560930 (CVE-2009-3560 and CVE-2009-3720), thanks to Michael
Gilbert and Moritz Muehlenhoff.
* Tighten watch file to not include macosx flavor, and simplify to no
longer mangle upstream gpl extension.
* Apply bug-fixing patches cherry-picked from upstream SVN:
+ 0751: Add missing dereferencing of indirect objects in /Mask array
+ 0778: Fix PDF trailer attributes undefined error
+ 0780: Add cast to bmpcmp.c to quiet useless compiler warning
+ 0782: Fix signedness and other wrong var comparisons in T2 dict
+ 0785: Fix pdfwrite UTF16 handling in PDF/A output
+ 0788: Fix error passing setscreen read-only Halftone type1 dict
+ 0794: Fix ignore a class of broken TrueType font
+ 0810: Fix pdfwrite widths for CIDFont with unusual FontMatrix
+ 0821: Add missing newline in a TTF debug message
+ 0822: Upgrade Adobe Glyph List to v. 2.0.
+ 0823: Fix drop wrong raster optimization in gxipixel.c
+ 0824: Fix PDF crop /TrimBox and /CropBox by the /MediaBox
* Refresh all patches with quilt option --no-timestamp.
-- Jonas Smedegaard <email address hidden> Sun, 28 Feb 2010 18:06:54 +0100
-
ghostscript (8.71~dfsg-1) unstable; urgency=low
* New upstream release.
* Acknowledge NMU. Closes: bug#562643, thanks to Andreas Kirschbaum.
* No longer strip Resource/Font dir when DFSG-repackaging source (GPL-
licensed since 8.63). Closes: bug#520215, thanks to Fabian
Greffrath.
* Update local CDBS snippets:
+ package-relations.mk:
- Merge mixture of versioned and unversioned dependencies
- Use unversioned dependencies when satisfied in oldstable
- Improve whitespace cleanup
- Rewrite and silence applying dependencies
- Handle cdbs 0.4.53 dependency (needed when using debhelper v7)
+ upstream-tarball.mk:
- Depend unversioned on cdbs (the needed 0.4.39 is in oldstable)
- Preserve bzip2 tarballs with source format '3.0 (quilt)'.
+ copyright-check.mk:
- More aggressive scanning (check top 99999 lines, not just 60)
- Simplify more licensing notices and preserve non-ASCII chars
- Group hints by sorted owner list (ignoring years)
- Limit console output both horisontally and vertically
- Use rev123 of draft DEP5 for hints file
* Use source format 3.0 "quilt" (and not patchsys-quit.mk). Update
README.source: normal builds need no special handling now.
* Add patches:
+ 1009 (Ubuntu): Fix build gs as executable (not shared library)
+ 0743 (Upstream): Fix pdfwrite UTF16-BE pdfmarks not garbling XMP
metadata
+ 0748 (Upstream): Fix nested ICCBased colour processing
+ 0749 (Upstream): Fix a few minor compile warnings
* Refresh patches, and reorder to apply in numerical order.
* Rewrite copyright file using draft DEP5 format: All earlier
information preserved, but also many new discoveries (some yet
incomplete - tagged FIXME in the file).
* Build-depend on libtiff-dev and enable use of libtiff.
* Update symbols files, and avoid Linux-only realloc symbol on Hurd
(we currently do not maintain symbols files for other non-Linux
archs). Closes: bug#546017, thanks to Pino Toscano.
* Bump Standards-Version to 3.8.4.
-- Jonas Smedegaard <email address hidden> Mon, 15 Feb 2010 23:39:11 +0100
-
ghostscript (8.70~dfsg-2.1) unstable; urgency=low
* Non-maintainer upload.
* Fix some security issues:
- CVE-2009-4270[0]: stack-based buffer overflow multiple integer
overflows in the icc library (closes: #562643)
- fix possible buffer overflow in gs_throw_imp()
-- Andreas Kirschbaum <email address hidden> Sat, 23 Jan 2010 10:19:35 +0100
-
ghostscript (8.70~dfsg-2) unstable; urgency=low
* Fix resolving package-relations.
-- Jonas Smedegaard <email address hidden> Sun, 02 Aug 2009 22:37:11 +0200
-
ghostscript (8.70~dfsg-1) unstable; urgency=low
* New upstream release.
* Strip unneeded subdirs zlib, jasper, libpng to simplify build and
licensing tracking.
* Drop patches 0001 and 0002 now included upstream.
* Simplify configure and cleanup (autoconf update no longer needed).
* Bump main license to GPL-3+ (from GPL-2+) in debian/copyright.
* Fix licensing of escv driver (GPL), and bump copyright year.
* Update package-relations.mk: Cleanup unversioned+versioned
dependency mix. Improve whitespace cleanup. Rewrite and silence
applying dependencies.
* Update symbols file.
-- Jonas Smedegaard <email address hidden> Sun, 02 Aug 2009 12:05:15 +0200
-
ghostscript (8.64~dfsg-13) unstable; urgency=low
* Fix ghostscript-cups to recommend (not depend on) cups and
cups-client: avoid circular dependencies for cups backends truly
depending on both cups and this package.
-- Jonas Smedegaard <email address hidden> Sat, 11 Jul 2009 22:32:38 +0200
-
ghostscript (8.64~dfsg-1.1) unstable; urgency=high
* Non-maintainer upload by the Security Team.
* This update fixes various security issues:
- CVE-2009-0792: multiple integer overflows in the icc library
can cause a heap-based buffer overflow possibly leading to arbitray
code execution.
- CVE-2009-0584/CVE-2009-0583: Multiple integer overflows causing an
application crash or possibly arbitrary code execution.
- CVE-2009-0196: heap-based buffer overflow in big2_decode_symbol_dict()
leading to arbitrary code execution via a crafted JBIG2 symbol
dictionary segment.
.
(Closes: #524915, #522416, #524803)
-- Nico Golde <email address hidden> Wed, 22 Apr 2009 00:19:51 +0200
-
ghostscript (8.64~dfsg-1) unstable; urgency=low
* New upstream release.
* Drop patches 13, 21-22, 24-32 and 34-70: applied upstream now.
* Drop patch 03 and simplify configure options: upstream supports
libpaper now.
* Drop patch 20: unneeded for recent ghostscript (see upstream r9430).
* Disable patches 11-12 (CJKV): cannot apply - needs code changes.
* Unfuzz patches 01-02.
* Add new patch 71 to install CJK example files.
* Add new patch 72 enhancing ps2pdf manpage to also mention ps2pdf14
(both original and german translation).
* Add README.source referencing quilt, svn-buildpackage and CDBS
documentation.
* Mention stripped Resource/Font directory in debian/copyright, and
rephrase related section for (hopefully) improved readability.
* Use local CDBS snippet upstream-tarball to implement get-orig-source
and more. Update README.source to document its use.
* ps2pdf alternatives handling dropped in preinst of ghostscript and
gs-common: ps2pdf is provided upstream as a script. Closes:
bug#475817.
* Add symlink for german manpage of ps2pdf to ps2pdf14.
* Fix bashisms in ghostscript prerm, thanks to lintian.
-- Jonas Smedegaard <email address hidden> Sun, 08 Mar 2009 01:16:27 +0100
-
ghostscript (8.63.dfsg.1-2) unstable; urgency=low
* libgs-dev: put versioned dependency on libgs8 - closes: #510691
-- Masayuki Hatta (mhatta) <email address hidden> Sun, 04 Jan 2009 12:09:59 +0900
-
ghostscript (8.63.dfsg.1-1) unstable; urgency=low
[Masayuki Hatta]
* Maintainer upload, New upstream release.
* Acknowledged NMUs, thanks tv - closes: #472645, #495703, #503712
* debian/patches/32_improve-handling-of-media-size-changes-from-gv.dpatch:
Allow gv to change the image and media size (Upstream bug #688943)
- closes: #142228
* debian/patches/33_bad-params-to-xinitimage-on-large-bitmaps.dpatch:
Fixed zooming problem in gv (Upstream bug #689547)
- closes: #419183
* debian/patches//34_ftbfs-on-hurd-fix.dpatch:
Fixed FTBFS on hurd-i386 - closes: #475704
* Added Homepage, Vcs-Svn and Vcs-Browser headers in control.
* Sync'd with the Ubuntu 8.63.dfsg.1-0ubuntu13.
[Till Kamppeter]
* debian/libgs8.shlibs: Removed. All libgs8 versions should have the same
API and ABI. The artificial restriction set by this file required all
reverse dependencies to be rebuilt for every stable release of Ghostscript.
* debian/patches/35_disable_libcairo.dpatch: Added possibility to
compile Ghostscript without the "cairo" output device. The device
is still in experimental state and with its dependency on libcairo
it pulls in a dependency on X.
* debian/control, debian/rules: Build Ghostscript without the "cairo"
output device.
* debian/patches/38_pxl-duplex.dpatch: The Duplex option of the "pxlmono"
and "pxlcolor" drivers did not work.
* debian/patches/39_pxl-resolution.dpatch: The resolution must be also set
as PJL command for the "pxlmono" and "pxlcolor" drivers.
* debian/patches/42_gs-init-ps-delaybind-fix.dpatch: Make "ps2ascii" working
again (Upstream bug #690124) - closes: #81430, #229748, #131528
* debian/patches/45_bjc600-bjc800-pdf-input.dpatch: Fix setting of the
"DitheringType" option. With PDF input Ghostscript crashes, with
PostScript input the "DitheringType" option was probably ignored
(Upstream bug #690032).
* debian/patches/48_cups-output-device-pdf-duplex-uninitialized-memory.patch.dpatch:
Fixed several bugs in the "cups" (CUPS Raster) output device:
- Ghostscript crashed with PDF input data
- The "Duplex" and "MediaWeight" options were ignored
- There was uninitialized memory and wrong usage of pointers, potential
cause for segmentation faults or even vulnerabilities
- There were mismatches in data types, leading to possible breakage
of the "AdvanceDistance", "MediaWeight", and "cupsStringXX" options.
(Upstream bug #690101).
* debian/local/pdftoraster/pdftoraster.c,
debian/local/pdftoraster/pdftoraster.convs, debian/rules: Added pdftoraster
filter from the Ghostscript SVN repository - closes: #505282
* debian/patches/50_lips4-floating-point-exception: Fixed floating-point
exception in "lips4" and other drivers (Upstream bug #690122).
* debian/patches/52_cups-device-logging.dpatch: Made logging of the "cups"
output device much less verbose. The log of one jub in debug mode did not
fit into the maximum log file size of CUPS.
* debian/patches/55_pcl-input-slot-fix.dpatch: Made the paper tray selection
via "-dMediaPosition=..." in the PCL 4/5/5e drivers work (Upstream bug
#690182).
* debian/patches/57_pxl-input-slot-fix.dpatch: Made the paper tray selection
via "-dMediaPosition=..." in the PCL 6/XL drivers work.
* debian/patches/60_pxl-cups-driver-pdf.dpatch: Made the PCL-XL CUPS filter
and PPDs work with PDF input.
* debian/patches/62_onebitcmyk-pdf.dpatch: Check the whole Decode array to
detect special cases of identity and inverse decoding in PDF files
(Upstream bug #690178).
* debian/ghostscript.postinst: Added automatic update of the PPD files
of already existing print queues.
* debian/ghostscript.postinst: Do not try to update the PPDs of existing
print queues if CUPS is not installed or not running.
* debian/patches/60_pxl-cups-driver-pdf.dpatch: The pstopxl filter did not
remove its temporary file after finishing.
* debian/patches/65_too-big-temp-files-1.dpatch: Ghostscript produced much
too big temporary files (> 10 GB) when printing photos from GNOME apps in
1200 dpi. Part 1 of the fix which reduces the temp file size to less than
2 GB (Upstream bug #690133).
* debian/patches/67_too-big-temp-files-2.dpatch: Complete fix for the too big
temporary files. Now the bug is completely fixed. Temp files are not much
bigger than the jobs themselves now (Upstream bug #690133).
* debian/patches/70_take-into-account-data-in-stream-buffer-before-refill.dpatch:
Certain files lead to a Ghostscript error due to wrong handling of the
stream buffer (Upstream bug #690090).
-- Masayuki Hatta (mhatta) <email address hidden> Sun, 04 Jan 2009 09:30:13 +0900
-
ghostscript (8.62.dfsg.1-3.2) unstable; urgency=low
* Non-maintainer upload.
* Make ghostscript depend on gs-common to prevent removal.
Drop gs-common -> ghostscript-x dependency to not force the
X version on all users. Hopefully Closes: #503712.
-- Thomas Viehmann <email address hidden> Sun, 28 Dec 2008 11:18:18 +0100
-
ghostscript (8.62.dfsg.1-3.1) unstable; urgency=medium
* Non-maintainer upload.
* Add (empty) gs-common.prerm to enable upgrades
etch->lenny to succeed when the old gs-common.prerm
fails. Closes: #495703.
Thanks to Niko Tyni for the bug report and analysis.
-- Thomas Viehmann <email address hidden> Sun, 31 Aug 2008 22:26:34 +0200
