lp:ubuntu/gutsy-security/ghostscript

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

17. By Marc Deslauriers on 2009-03-22

* SECURITY UPDATE: Arbitrary code execution due to integer overflows and
  insufficient upper-bounds checks in the ICC library
  - debian/patches/44_CVE-2009-0583_0584.dpatch: fix multiple integer
    overflows and perform bounds checking in icclib/icc.c.
  - CVE-2009-0583
  - CVE-2009-0584

16. By Jamie Strandboge on 2008-04-08

* SECURITY UPDATE: buffer overflow in color space handling code
* debian/patches/43_CVE-2008-0411.dpatch: fix zseticcspace() to perform
  range checks
* References
  CVE-2008-0411

15. By Kees Cook on 2007-10-22

[ Kees Cook ]
* SECURITY UPDATE: possible code execution via crafted JPEG2000 images.
* Add debian/patches/40_embedded_jasper_fix.dpatch: upstream backports.
* References
  https://launchpad.net/bugs/153765
  CVE-2007-2721

[ Martin Pitt ]
* debian/rules: Clean /usr/share/doc/*.html files from package
  'ghostscript', too (incomplete fix in previous versions), since they are
  already shipped in ghostscript-doc and thus have a file conflict.
  (LP: #153218)

14. By Martin Pitt on 2007-10-09

[ Till Kamppeter ]
* debian/rules: Install missing *.upp files (usptream bug, LP: #150985).

[ Martin Pitt ]
* debian/rules: Clean files from package ghostscript which are moved to
  ghostscript-doc on i386 (where arch-all packages are built). On all
  non-i386 platforms the files remained in the main package, which causes
  file conflicts and unnecessary package growth. This is a quick hack for
  Gutsy. In Hardy, this horribly broken build system should be fixed
  properly.

13. By Till Kamppeter on 2007-09-18

* debian/patches/06_libpaper_support.dpatch: Added missing
  "#include <paper.h>", this made Ghostscript not working at all
  on IA64 (Fixes LP: #130842, thanks to Ralph Giles from ghostscript.com
  for the fix and to Matthias Klose for the IA64 test machine).
* debian/ghostscript.links: Bumped version number in link for CJK fonts
  (Fixes LP: #139911).

12. By Till Kamppeter on 2007-08-13

New upstream release
o SVN snapshot rev 8187
o CJK patches from Koji Otani to fix several issues with CJK text
(should fix http://bugs.ghostscript.com/show_bug.cgi?id=689304).
These patches were also applied to ESP Ghostscript and having them
in Gutsy's GPL GS will avoide regressions against Feisty's ESP GS.
o Minor bug fixes from upstream.

11. By Matthias Klose on 2007-08-10

* debian/patches/30_assorted_script_fixes.dpatch: Back out the update
  to pdf2eps, causing build failures on the buildds.
* debian/control: Build-depend on freeglut3-dev | libglut-dev.

10. By Till Kamppeter on 2007-08-02

* Final release of Ghostscript 8.60
  o First official release of GPL Ghostscript with merged functionality
    of ESP Ghostscript.
  o Closes: LP: #128801
* debian/patches/50_gv_kghostview_compatibility.dpatch: Removed workaround,
  real fix done upstream

9. By Till Kamppeter on 2007-07-16

* New upstream release
  o SVN snapshot rev 8127
  o Carried over some bug fixes from ESP Ghostscript (see
    http://bugs.ghostscript.com/show_bug.cgi?id=689315)
  o Minor bug fixes from upstream.
* debian/patches/30_assorted_script_fixes.dpatch: Updated.

8. By Till Kamppeter on 2007-06-14

* New upstream release
  o SVN snapshot rev 8050
  o From now on we take snapshots from the trunk, as the merger of ESP and
    GPL Ghostscript is completed and moved into the trunk. The branch
    "gs-esp-gpl-merger" has been removed.
  o Minor bug fixes from upstream.
* debian/patches/50_gv_kghostview_compatibility.dpatch: Updated.