All of lore.kernel.org
 help / color / mirror / Atom feed
* [Buildroot] [PATCH 1/1] package/ghostscript: security bump to version 10.02.1
@ 2024-02-10 10:09 Julien Olivain
  2024-02-11 21:40 ` Thomas Petazzoni via buildroot
  2024-03-16 20:56 ` Peter Korsgaard
  0 siblings, 2 replies; 3+ messages in thread
From: Julien Olivain @ 2024-02-10 10:09 UTC (permalink / raw)
  To: buildroot; +Cc: Bernd Kuhls, Julien Olivain

For release note, see:
https://ghostscript.readthedocs.io/en/gs10.02.1/News.html

For detailed history, see:
https://git.ghostscript.com/?p=ghostpdl.git;a=shortlog;h=refs/tags/ghostpdl-10.02.1

Fixes:
- CVE-2023-46751:
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46751

Signed-off-by: Julien Olivain <ju.o@free.fr>
---
 package/ghostscript/ghostscript.hash | 4 ++--
 package/ghostscript/ghostscript.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/ghostscript/ghostscript.hash b/package/ghostscript/ghostscript.hash
index 77c8faccbe..849f6c64ba 100644
--- a/package/ghostscript/ghostscript.hash
+++ b/package/ghostscript/ghostscript.hash
@@ -1,5 +1,5 @@
-# From https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10020/SHA512SUMS
-sha512  c49344151063e915add55a0a842c2a645d8362a5cbca663bd07638f4bd3699a08cade37a9efe905ad5a41e014353e5e1b1268b7925e43128ad30d5b031396b71  ghostscript-10.02.0.tar.xz
+# From https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10021/SHA512SUMS
+sha512  ee0f754c1bd8a18428ad14eaa3ead80ff8b96275af5012e7a8384f1f10490da056eec9ae3cc791a7a13a24e16e54df5bccdd109c7d53a14534bbd7360a300b11  ghostscript-10.02.1.tar.xz
 
 # Hash for license file:
 sha256  8ce064f423b7c24a011b6ebf9431b8bf9861a5255e47c84bfb23fc526d030a8b  LICENSE
diff --git a/package/ghostscript/ghostscript.mk b/package/ghostscript/ghostscript.mk
index 161521f970..da23ebbadb 100644
--- a/package/ghostscript/ghostscript.mk
+++ b/package/ghostscript/ghostscript.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-GHOSTSCRIPT_VERSION = 10.02.0
+GHOSTSCRIPT_VERSION = 10.02.1
 GHOSTSCRIPT_SOURCE = ghostscript-$(GHOSTSCRIPT_VERSION).tar.xz
 GHOSTSCRIPT_SITE = https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs$(subst .,,$(GHOSTSCRIPT_VERSION))
 GHOSTSCRIPT_LICENSE = AGPL-3.0
-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 3+ messages in thread

* Re: [Buildroot] [PATCH 1/1] package/ghostscript: security bump to version 10.02.1
  2024-02-10 10:09 [Buildroot] [PATCH 1/1] package/ghostscript: security bump to version 10.02.1 Julien Olivain
@ 2024-02-11 21:40 ` Thomas Petazzoni via buildroot
  2024-03-16 20:56 ` Peter Korsgaard
  1 sibling, 0 replies; 3+ messages in thread
From: Thomas Petazzoni via buildroot @ 2024-02-11 21:40 UTC (permalink / raw)
  To: Julien Olivain; +Cc: Bernd Kuhls, buildroot

On Sat, 10 Feb 2024 11:09:28 +0100
Julien Olivain <ju.o@free.fr> wrote:

> For release note, see:
> https://ghostscript.readthedocs.io/en/gs10.02.1/News.html
> 
> For detailed history, see:
> https://git.ghostscript.com/?p=ghostpdl.git;a=shortlog;h=refs/tags/ghostpdl-10.02.1
> 
> Fixes:
> - CVE-2023-46751:
>   https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46751
> 
> Signed-off-by: Julien Olivain <ju.o@free.fr>
> ---
>  package/ghostscript/ghostscript.hash | 4 ++--
>  package/ghostscript/ghostscript.mk   | 2 +-
>  2 files changed, 3 insertions(+), 3 deletions(-)

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: [Buildroot] [PATCH 1/1] package/ghostscript: security bump to version 10.02.1
  2024-02-10 10:09 [Buildroot] [PATCH 1/1] package/ghostscript: security bump to version 10.02.1 Julien Olivain
  2024-02-11 21:40 ` Thomas Petazzoni via buildroot
@ 2024-03-16 20:56 ` Peter Korsgaard
  1 sibling, 0 replies; 3+ messages in thread
From: Peter Korsgaard @ 2024-03-16 20:56 UTC (permalink / raw)
  To: Julien Olivain; +Cc: Bernd Kuhls, buildroot

>>>>> "Julien" == Julien Olivain <ju.o@free.fr> writes:

 > For release note, see:
 > https://ghostscript.readthedocs.io/en/gs10.02.1/News.html

 > For detailed history, see:
 > https://git.ghostscript.com/?p=ghostpdl.git;a=shortlog;h=refs/tags/ghostpdl-10.02.1

 > Fixes:
 > - CVE-2023-46751:
 >   https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46751

 > Signed-off-by: Julien Olivain <ju.o@free.fr>

Committed to 2023.02.x and 2023.11.x, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2024-03-16 20:56 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2024-02-10 10:09 [Buildroot] [PATCH 1/1] package/ghostscript: security bump to version 10.02.1 Julien Olivain
2024-02-11 21:40 ` Thomas Petazzoni via buildroot
2024-03-16 20:56 ` Peter Korsgaard

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.