From patchwork Sat Feb 20 21:10:08 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Vincent Legoll X-Patchwork-Id: 27167 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id CA8F627BC49; Sat, 20 Feb 2021 21:12:05 +0000 (GMT) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00,DKIM_ADSP_CUSTOM_MED, DKIM_SIGNED,FREEMAIL_FROM,MAILING_LIST_MULTI,RCVD_IN_MSPIKE_H3, RCVD_IN_MSPIKE_WL,SPF_HELO_PASS,T_DKIM_INVALID,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.2 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 970EA27BC48 for ; Sat, 20 Feb 2021 21:12:05 +0000 (GMT) Received: from localhost ([::1]:53538 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lDZXo-0002yv-Ph for patchwork@mira.cbaines.net; Sat, 20 Feb 2021 16:12:04 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:38192) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lDZWo-0002Bp-8P for guix-patches@gnu.org; Sat, 20 Feb 2021 16:11:02 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:41445) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lDZWo-0004a5-02 for guix-patches@gnu.org; Sat, 20 Feb 2021 16:11:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lDZWn-0004E2-Sa for guix-patches@gnu.org; Sat, 20 Feb 2021 16:11:01 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#46566] [PATCH 1/2] gnu: jbig2dec: Update to 0.19. References: In-Reply-To: Resent-From: Vincent Legoll Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 20 Feb 2021 21:11:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 46566 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 46566@debbugs.gnu.org Cc: Vincent Legoll Received: via spool by 46566-submit@debbugs.gnu.org id=B46566.161385542716194 (code B ref 46566); Sat, 20 Feb 2021 21:11:01 +0000 Received: (at 46566) by debbugs.gnu.org; 20 Feb 2021 21:10:27 +0000 Received: from localhost ([127.0.0.1]:52989 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lDZWF-0004D8-BA for submit@debbugs.gnu.org; Sat, 20 Feb 2021 16:10:27 -0500 Received: from mail-wm1-f53.google.com ([209.85.128.53]:51406) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lDZWB-0004Cn-Gb for 46566@debbugs.gnu.org; Sat, 20 Feb 2021 16:10:25 -0500 Received: by mail-wm1-f53.google.com with SMTP id o82so10073572wme.1 for <46566@debbugs.gnu.org>; Sat, 20 Feb 2021 13:10:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=x/xd0J2cnbU7IDuOYP/qfwkmR9pKSiVc0lh3WqAlBKw=; b=tqMbWSQlw6/nLfVwE8y8Z+G3n/adROmEi4zrcS8wFRs/N8YcMiOvJrWCFT5vbmfpZE mJPJNXQdnGbvYyLjVLHKl8VVtlt1BWQqw2Dr86Ttp+7xOCwljS5ZnKs00MxQvqVA2luM BABmgcgmsygBN0v4C/GyvHDaMVvwAgkzTL0x3v83F8DUcuyvlG+U5NM/uwigLJObTgEV A/D7wZ630jqsLtSbNIkoGjUUgQBhukj4Z5cCKdsejqcnagOvRaAI9gpQxGod8x1UlKqE lwOiH9A7Y8KNlyy2/F+T7DOZyHG7Kj7GQVETSPN+h8Xm5jPNEVyMZnJfEbsavAKXIhaN b2sw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=x/xd0J2cnbU7IDuOYP/qfwkmR9pKSiVc0lh3WqAlBKw=; b=EQegwR7phzUn7bhU738Fkyfo9cUMiATzuJmG9ZUAzqWo+1prw3UO4sL+k2GE0UVjES VYJmpOQpM3ykas8hH7BVR/cZaoG5/11F3u9a/jqGzZ+M30RuNAxzH7+c2jw1apbAfpPT 3ctbw93+mCKzLrNl372HBOqkFUR8ANot8tfFXBL+yERKfnSVEaavh0X5BD5rDxpZL6+D PtcL0IjO3dD70psk4U6N9syhvy8eGaU23oMLMSSPsf+TWqUJw3LohjuNsTmQw2svWgVb qH2z0nz+vHa1313/RYYkI00DpfgRez6dWL9HCSvcG7aIDpd3QFKqQHiUQryiy+sK0zNV QBdg== X-Gm-Message-State: AOAM533Y+BkTLJn+YVczbBRbZnp6z6UyOhM2Is+w+5X+3bhyjHIKHuh3 2iY8mCeZYlknGxYqZV57GWSCg/pJcjU= X-Google-Smtp-Source: ABdhPJwCdPewT5iWlPMk1SQNZ4hHrHQMwBwtkrb86QOfPyCzzHGEkLI713UiOu/EucTL59/GSqKVLA== X-Received: by 2002:a05:600c:4ec6:: with SMTP id g6mr13486839wmq.72.1613855417784; Sat, 20 Feb 2021 13:10:17 -0800 (PST) Received: from localhost.localdomain ([88.163.74.64]) by smtp.gmail.com with ESMTPSA id h17sm13195710wrw.74.2021.02.20.13.10.16 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 20 Feb 2021 13:10:17 -0800 (PST) From: Vincent Legoll Date: Sat, 20 Feb 2021 22:10:08 +0100 Message-Id: <20210220211009.6014-1-vincent.legoll@gmail.com> X-Mailer: git-send-email 2.30.0 MIME-Version: 1.0 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: "Guix-patches" X-getmail-retrieved-from-mailbox: Patches * gnu/packages/image.scm (jbig2dec): Update to 0.19. --- gnu/packages/image.scm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gnu/packages/image.scm b/gnu/packages/image.scm index 958f1dcc59..6dff48bd87 100644 --- a/gnu/packages/image.scm +++ b/gnu/packages/image.scm @@ -674,15 +674,15 @@ arithmetic ops.") (define-public jbig2dec (package (name "jbig2dec") - (version "0.18") + (version "0.19") (source (origin (method url-fetch) (uri (string-append "https://github.com/ArtifexSoftware" "/ghostpdl-downloads/releases/download" - "/gs951/" name "-" version ".tar.gz")) + "/gs9533/" name "-" version ".tar.gz")) (sha256 (base32 - "0pigfw2v0ppvr0lbysm69gx0zsa5q2q92yrb8af2j3im6x97f6cy")))) + "0dwa24kjqyg9hmm40fh048sdxfpnasz43l2rm8wlkw1qbdlpd517")))) (build-system gnu-build-system) (arguments '(#:configure-flags '("--disable-static") #:phases (modify-phases %standard-phases From patchwork Sat Feb 20 21:10:09 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Vincent Legoll X-Patchwork-Id: 27166 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 4F30827BC49; Sat, 20 Feb 2021 21:11:32 +0000 (GMT) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00,DKIM_ADSP_CUSTOM_MED, DKIM_SIGNED,FREEMAIL_FROM,MAILING_LIST_MULTI,RCVD_IN_MSPIKE_H3, RCVD_IN_MSPIKE_WL,SPF_HELO_PASS,T_DKIM_INVALID,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.2 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id C62CC27BC48 for ; Sat, 20 Feb 2021 21:11:31 +0000 (GMT) Received: from localhost ([::1]:51826 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lDZXG-0002Dc-W6 for patchwork@mira.cbaines.net; Sat, 20 Feb 2021 16:11:31 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:38194) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lDZWo-0002CG-Nc for guix-patches@gnu.org; Sat, 20 Feb 2021 16:11:02 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:41446) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lDZWo-0004aA-Cd for guix-patches@gnu.org; Sat, 20 Feb 2021 16:11:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lDZWo-0004E9-8O for guix-patches@gnu.org; Sat, 20 Feb 2021 16:11:02 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#46566] [PATCH 2/2] gnu: ghostscript: Update to 9.53.3. Resent-From: Vincent Legoll Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 20 Feb 2021 21:11:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 46566 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 46566@debbugs.gnu.org Cc: Vincent Legoll Received: via spool by 46566-submit@debbugs.gnu.org id=B46566.161385543016204 (code B ref 46566); Sat, 20 Feb 2021 21:11:02 +0000 Received: (at 46566) by debbugs.gnu.org; 20 Feb 2021 21:10:30 +0000 Received: from localhost ([127.0.0.1]:52991 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lDZWH-0004DH-Jr for submit@debbugs.gnu.org; Sat, 20 Feb 2021 16:10:29 -0500 Received: from mail-wr1-f46.google.com ([209.85.221.46]:44104) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lDZWC-0004Cp-5H for 46566@debbugs.gnu.org; Sat, 20 Feb 2021 16:10:26 -0500 Received: by mail-wr1-f46.google.com with SMTP id h98so9953289wrh.11 for <46566@debbugs.gnu.org>; Sat, 20 Feb 2021 13:10:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=qS1QizpCuoZ9bThIW7HNbmPl8Cwq0cUIz05aytUH9Rw=; b=sMhHBAHIpZlMlGdQfa0oA8aTzvqhWJVgB/UqU42Ju2oxAXb6iEZ3bHUq7Jaa70P3aP kLCPqhZIWM0BTYMJc+FrlFgHnUxz8M4Js7VxQmgB2B8hDXafJmyoG/iISwk/1pfTfJbs JGxOX/MFy2WADVS5kD0Ili7WllhGx7QO6Quf/nXy0jtD9matyURoPEoCF5X0c9tUOXPu RWrmm/11JB/zOPdYDtSBxTeXDGyeHx+sirq8y6iVMqEdFNjV6La5yO0gqN51ZCTEFey6 M8CnRyPKG0Dnyf+Scz8RByWiZEo2GCk97RcjufA4uKHCzWDOX2Xfdwyp19/kj7RcRTCf wOng== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=qS1QizpCuoZ9bThIW7HNbmPl8Cwq0cUIz05aytUH9Rw=; b=tsgERjdZ7Itwa1E2dDjhic3bKvn3aD9b9WD2zjQlhtpTKyZaSaCLyeVBYfLxbpnl5L qvQ0XbXPyHAk9HQlTJdDdTOR1Ibvj+Zkmxftg3rO4Y08F9maDRHxTWfPGsHqGB6vqy3s NWbVFF+BZAVy6ITU/UGzG8+tdWrEA9T5B0cJnfuC+d83jx1emA/EEaL4xUSI1k0esIU2 Pu3f6fwrsNb+p98N4lbGhQZnZExU3qavTsw4ncGFrAnnVm4qxKH+uZ3ibcepU91bvP2Y K+XWWLKnsQ4mrtdvPKqW21Wwgvf9URMiX193R8S7DW7977HjPesbXJzTnxN8IEY4POYP uQvQ== X-Gm-Message-State: AOAM533tvCfNyum1e6Jj7zLAvuZSTE2BJh8+38HBW8913NdTUmCrI7wY WvbdxyQXlGO0DVmtUH9oRShPt/gUqPs= X-Google-Smtp-Source: ABdhPJy15gU9JocKGOMBx5jHKSwj1EA1rmkMq2dq232KcHjuhIEd5inzS5dJDrvzJoyrwru/A7SXvA== X-Received: by 2002:a05:6000:4e:: with SMTP id k14mr14782005wrx.281.1613855418464; Sat, 20 Feb 2021 13:10:18 -0800 (PST) Received: from localhost.localdomain ([88.163.74.64]) by smtp.gmail.com with ESMTPSA id h17sm13195710wrw.74.2021.02.20.13.10.17 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 20 Feb 2021 13:10:18 -0800 (PST) From: Vincent Legoll Date: Sat, 20 Feb 2021 22:10:09 +0100 Message-Id: <20210220211009.6014-2-vincent.legoll@gmail.com> X-Mailer: git-send-email 2.30.0 In-Reply-To: <20210220211009.6014-1-vincent.legoll@gmail.com> References: <20210220211009.6014-1-vincent.legoll@gmail.com> MIME-Version: 1.0 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: "Guix-patches" X-getmail-retrieved-from-mailbox: Patches * gnu/packages/ghostscript.scm (ghostscript): Update to 9.53.3. [source]: Remove obsolete patch 'ghostscript-CVE-2020-15900.patch'. * gnu/packages/patches/ghostscript-CVE-2020-15900.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it. --- gnu/local.mk | 1 - gnu/packages/ghostscript.scm | 5 ++- .../patches/ghostscript-CVE-2020-15900.patch | 36 ------------------- 3 files changed, 2 insertions(+), 40 deletions(-) delete mode 100644 gnu/packages/patches/ghostscript-CVE-2020-15900.patch diff --git a/gnu/local.mk b/gnu/local.mk index b9757fe69e..3caa6c6fc9 100644 --- a/gnu/local.mk +++ b/gnu/local.mk @@ -1061,7 +1061,6 @@ dist_patch_DATA = \ %D%/packages/patches/ghc-monad-par-fix-tests.patch \ %D%/packages/patches/ghc-pandoc-fix-html-tests.patch \ %D%/packages/patches/ghc-pandoc-fix-latex-test.patch \ - %D%/packages/patches/ghostscript-CVE-2020-15900.patch \ %D%/packages/patches/ghostscript-freetype-compat.patch \ %D%/packages/patches/ghostscript-no-header-id.patch \ %D%/packages/patches/ghostscript-no-header-uuid.patch \ diff --git a/gnu/packages/ghostscript.scm b/gnu/packages/ghostscript.scm index 19430d315a..2a13cbd83f 100644 --- a/gnu/packages/ghostscript.scm +++ b/gnu/packages/ghostscript.scm @@ -160,7 +160,7 @@ printing, and psresize, for adjusting page sizes.") (define-public ghostscript (package (name "ghostscript") - (version "9.52") + (version "9.53.3") (source (origin (method url-fetch) @@ -170,9 +170,8 @@ printing, and psresize, for adjusting page sizes.") "/ghostscript-" version ".tar.xz")) (sha256 (base32 - "0z1w42y2jmcpl2m1l3z0sfii6zmvzcwcgzn6bydklia6ig7jli2p")) + "0d52w9ajv1rz533119ywgmkzkapp74riwny0d21v0zkcbg45p7ww")) (patches (search-patches "ghostscript-freetype-compat.patch" - "ghostscript-CVE-2020-15900.patch" "ghostscript-no-header-creationdate.patch" "ghostscript-no-header-id.patch" "ghostscript-no-header-uuid.patch")) diff --git a/gnu/packages/patches/ghostscript-CVE-2020-15900.patch b/gnu/packages/patches/ghostscript-CVE-2020-15900.patch deleted file mode 100644 index b6658d7c7f..0000000000 --- a/gnu/packages/patches/ghostscript-CVE-2020-15900.patch +++ /dev/null @@ -1,36 +0,0 @@ -Fix CVE-2020-15900. - -https://cve.circl.lu/cve/CVE-2020-15900 -https://artifex.com/security-advisories/CVE-2020-15900 - -Taken from upstream: -https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=5d499272b95a6b890a1397e11d20937de000d31b - -diff --git a/psi/zstring.c b/psi/zstring.c ---- a/psi/zstring.c -+++ b/psi/zstring.c -@@ -142,13 +142,18 @@ search_impl(i_ctx_t *i_ctx_p, bool forward) - return 0; - found: - op->tas.type_attrs = op1->tas.type_attrs; -- op->value.bytes = ptr; -- r_set_size(op, size); -+ op->value.bytes = ptr; /* match */ -+ op->tas.rsize = size; /* match */ - push(2); -- op[-1] = *op1; -- r_set_size(op - 1, ptr - op[-1].value.bytes); -- op1->value.bytes = ptr + size; -- r_set_size(op1, count + (!forward ? (size - 1) : 0)); -+ op[-1] = *op1; /* pre */ -+ op[-3].value.bytes = ptr + size; /* post */ -+ if (forward) { -+ op[-1].tas.rsize = ptr - op[-1].value.bytes; /* pre */ -+ op[-3].tas.rsize = count; /* post */ -+ } else { -+ op[-1].tas.rsize = count; /* pre */ -+ op[-3].tas.rsize -= count + size; /* post */ -+ } - make_true(op); - return 0; - }