main/ghostscript: security upgrade to 10.03.1

This commit is contained in:
J0WI 2024-05-18 20:10:09 +02:00 committed by Natanael Copa
parent 4c60de47fb
commit 8a36e3496d

View file

@ -1,7 +1,7 @@
# Contributor: Cameron Banta <cbanta@gmail.com>
# Maintainer: Cameron Banta <cbanta@gmail.com>
pkgname=ghostscript
pkgver=10.02.1
pkgver=10.03.1
pkgrel=0
pkgdesc="Interpreter for the PostScript language and for PDF"
url="https://ghostscript.com/"
@ -31,6 +31,12 @@ source="https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/
"
# secfixes:
# 10.03.1-r0:
# - CVE-2023-52722
# - CVE-2024-29510
# - CVE-2024-33869
# - CVE-2024-33870
# - CVE-2024-33871
# 10.02.0-r0:
# - CVE-2023-43115
# 9.54-r1:
@ -104,8 +110,23 @@ prepare() {
default_prepare # apply patches
# force it to use system-libs
rm -r jpeg libpng zlib tiff lcms2mt cups/libs jbig2dec \
freetype
rm -r \
cups/libs \
freetype \
jbig2dec \
jpeg \
lcms2mt \
libpng \
openjpeg \
tiff \
zlib
# fails to build tesseract due missing SIMD instructions on arm32:
case "$CARCH" in
armhf|armv7)
rm -r leptonica tesseract
;;
esac
# fix parallel builds
sed -i -e 's/ECHO_XE/ECHOGS_XE/g' \
@ -171,7 +192,7 @@ gtk() {
}
sha512sums="
24eeff047a24085413283ee42539a2feea4d3de81077664861399055a9d30349a0ef0950746bb0b0ee2237b4b9ee215340204ab0e33347b53dc2acee85fcfc19 ghostscript-10.02.1.tar.gz
c1eec6550ce2d9c8fe78c2e9c91eaa40e1ae3d8625b510e712c0e0ab39ad00d4fa493af5f798a06c21a4acd72a0b503758a0d8f79cc37d5cc1a23ac7f3ba41e2 ghostscript-10.03.1.tar.gz
70721e3a335afa5e21d4e6cf919119010bd4544a03ab8f53f5325c173902221ad9b88c118b4bfeee80b3e1956bcdbaf4c53f64ae7fb81f5ba57dbc956750c482 ghostscript-system-zlib.patch
beefcf395f7f828e1b81c088022c08a506e218f27535b9de01e0f0edf7979b435316c318fa676771630f6ad16ff1ab059cd68aa128ed97e5a9f2f3fa840200c4 fix-sprintf.patch
"