mirrors/aports
1
0
Fork 0
mirror of https://gitlab.alpinelinux.org/alpine/aports.git synced 2025-08-06 05:47:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

main/ghostscript: security upgrade to 10.03.1

Browse Source
This commit is contained in:
J0WI 2024-05-18 20:10:09 +02:00 committed by Natanael Copa
parent 4c60de47fb
commit 8a36e3496d
1 changed files with 25 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
main/ghostscript/APKBUILD
View File

@ -1,7 +1,7 @@
# Contributor: Cameron Banta <cbanta@gmail.com> # Contributor: Cameron Banta <cbanta@gmail.com>
# Maintainer: Cameron Banta <cbanta@gmail.com> # Maintainer: Cameron Banta <cbanta@gmail.com>
pkgname=ghostscript pkgname=ghostscript
pkgver=10.02.1 pkgver=10.03.1
pkgrel=0 pkgrel=0
pkgdesc="Interpreter for the PostScript language and for PDF" pkgdesc="Interpreter for the PostScript language and for PDF"
url="https://ghostscript.com/" url="https://ghostscript.com/"
@ -31,6 +31,12 @@ source="https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/
" "
# secfixes: # secfixes:
# 10.03.1-r0:
# - CVE-2023-52722
# - CVE-2024-29510
# - CVE-2024-33869
# - CVE-2024-33870
# - CVE-2024-33871
# 10.02.0-r0: # 10.02.0-r0:
# - CVE-2023-43115 # - CVE-2023-43115
# 9.54-r1: # 9.54-r1:
@ -104,8 +110,23 @@ prepare() {
default_prepare # apply patches default_prepare # apply patches
# force it to use system-libs # force it to use system-libs
rm -r jpeg libpng zlib tiff lcms2mt cups/libs jbig2dec \ rm -r \
freetype cups/libs \
freetype \
jbig2dec \
jpeg \
lcms2mt \
libpng \
openjpeg \
tiff \
zlib
# fails to build tesseract due missing SIMD instructions on arm32:
case "$CARCH" in
armhf|armv7)
rm -r leptonica tesseract
;;
esac
# fix parallel builds # fix parallel builds
sed -i -e 's/ECHO_XE/ECHOGS_XE/g' \ sed -i -e 's/ECHO_XE/ECHOGS_XE/g' \
@ -171,7 +192,7 @@ gtk() {
} }
sha512sums=" sha512sums="
24eeff047a24085413283ee42539a2feea4d3de81077664861399055a9d30349a0ef0950746bb0b0ee2237b4b9ee215340204ab0e33347b53dc2acee85fcfc19 ghostscript-10.02.1.tar.gz c1eec6550ce2d9c8fe78c2e9c91eaa40e1ae3d8625b510e712c0e0ab39ad00d4fa493af5f798a06c21a4acd72a0b503758a0d8f79cc37d5cc1a23ac7f3ba41e2 ghostscript-10.03.1.tar.gz
70721e3a335afa5e21d4e6cf919119010bd4544a03ab8f53f5325c173902221ad9b88c118b4bfeee80b3e1956bcdbaf4c53f64ae7fb81f5ba57dbc956750c482 ghostscript-system-zlib.patch 70721e3a335afa5e21d4e6cf919119010bd4544a03ab8f53f5325c173902221ad9b88c118b4bfeee80b3e1956bcdbaf4c53f64ae7fb81f5ba57dbc956750c482 ghostscript-system-zlib.patch
beefcf395f7f828e1b81c088022c08a506e218f27535b9de01e0f0edf7979b435316c318fa676771630f6ad16ff1ab059cd68aa128ed97e5a9f2f3fa840200c4 fix-sprintf.patch beefcf395f7f828e1b81c088022c08a506e218f27535b9de01e0f0edf7979b435316c318fa676771630f6ad16ff1ab059cd68aa128ed97e5a9f2f3fa840200c4 fix-sprintf.patch
" "