Thursday, November 02, 2023

[Security] ghostscript/gnu 10.02.1

Index: Makefile
===================================================================
RCS file: /cvs/ports/print/ghostscript/gnu/Makefile,v
retrieving revision 1.128
diff -u -p -r1.128 Makefile
--- Makefile 25 Sep 2023 07:55:09 -0000 1.128
+++ Makefile 2 Nov 2023 18:08:56 -0000
@@ -1,6 +1,6 @@
COMMENT = PostScript and PDF interpreter

-VERSION = 10.02.0
+VERSION = 10.02.1
DISTNAME = ghostscript-${VERSION}
EXTRACT_SUFX = .tar.xz
CATEGORIES = lang print
Index: distinfo
===================================================================
RCS file: /cvs/ports/print/ghostscript/gnu/distinfo,v
retrieving revision 1.23
diff -u -p -r1.23 distinfo
--- distinfo 25 Sep 2023 07:55:09 -0000 1.23
+++ distinfo 2 Nov 2023 18:08:56 -0000
@@ -1,2 +1,2 @@
-SHA256 (ghostscript-10.02.0.tar.xz) = +gjOAWsw0mKT3DIsY1NpGs7ZT9Nmemjt5/9TldcfzQs=
-SIZE (ghostscript-10.02.0.tar.xz) = 67955320
+SHA256 (ghostscript-10.02.1.tar.xz) = jFjJSLByG+zvzQApyNuV+bsyaK/8JeoB1MWmsH+hqwg=
+SIZE (ghostscript-10.02.1.tar.xz) = 68017088
ghostscript released a patch release addressing some vaguely specified
security bugs.
From the changelog, it looks like there's at least a buffer overflow and an
integer overflow that got fixed, so I think we want those fixes ASAP:

https://git.ghostscript.com/?p=ghostpdl.git;a=shortlog;h=refs/tags/ghostpdl-10.02.1

Built and tested on amd64. ok?

No comments:

Post a Comment