ghostscript-9.20-1

git-svn-id: http://trac.vinelinux.org/repos/projects/specs@11067 ec354946-7b23-47d6-9f5a-488ba84defc7

g/ghostscript/ghostscript-vl.spec

@@ -1,18 +1,18 @@
-%define gs_ver 9.15
-%define gs_dot_ver 9.15
+%define gs_ver 9.20
+%define gs_dot_ver 9.20
 %{expand: %%define build_with_freetype %{?_with_freetype:1}%{!?_with_freetype:0}}
 Summary: A PostScript(TM) interpreter and renderer.
 Summary(ja): 日本語 PostScript(TM) インタプリタ/レンダラ/ビュア
 Name: ghostscript
 Version: %{gs_ver}
-Release: 2%{?_dist_release}
+Release: 1%{?_dist_release}
 
 # Included CMap data is Redistributable, no modification permitted,
 # see http://bugzilla.redhat.com/487510
 License: AGPLv3+ and Redistributable, no modification permitted
 URL: http://www.ghostscript.com/
 Group: Applications/Publishing
-Source0: ghostscript-%{gs_ver}-cleaned-1.tar.bz2
+Source0: ghostscript-%{gs_ver}.tar.xz
 # ghostscript contains code we cannot ship due to licensing concerns.
 # Therefore we use this script to remove it before shipping the
 # tarball.
@@ -26,20 +26,28 @@ Source5: cidfmap.ja
 Source10: Changelog.gs7.vine
 
 # patches from fedora
-Patch1: ghostscript-multilib.patch
-Patch2: ghostscript-scripts.patch
-Patch3: ghostscript-noopt.patch
-Patch4: ghostscript-runlibfileifexists.patch
-Patch5: ghostscript-icc-missing-check.patch
-Patch6: ghostscript-Fontmap.local.patch
-Patch7: ghostscript-wrf-snprintf.patch
-Patch8: ghostscript-system-openjpeg2.patch
-
-# buildfix
-Patch20: ghostscript-8.71-fix-build-executables.patch
+Patch1: ghostscript-9.20-fix-openjpeg-system-build.patch
+Patch2: ghostscript-9.20-runlibfileifexists.patch
+Patch3: ghostscript-9.20-run-dvipdf-securely.patch
+Patch4: ghostscript-9.20-urw-fonts-naming.patch
+Patch10: ghostscript-9.20-handle-glyphdirectory-correctly.patch
+Patch11: ghostscript-9.20-remove-and-reimplement-ConvertUTF.patch
 
 # security patches
-Patch1000: fix696041.patch
+Patch5: ghostscript-9.20-cve-2016-7979.patch
+Patch6: ghostscript-9.20-cve-2016-7976.patch
+Patch7: ghostscript-9.20-cve-2016-7978.patch
+Patch8: ghostscript-9.20-cve-2016-8602.patch
+Patch9: ghostscript-9.20-cve-2016-7977.patch
+Patch12: ghostscript-9.20-cve-2016-9601.patch
+Patch13: ghostscript-9.20-cve-2017-7207.patch
+Patch14: ghostscript-9.20-cve-2016-10217.patch
+Patch15: ghostscript-9.20-cve-2016-10218.patch
+Patch16: ghostscript-9.20-cve-2016-10219.patch
+Patch17: ghostscript-9.20-cve-2016-10220.patch
+Patch18: ghostscript-9.20-cve-2017-5951.patch
+Patch19: ghostscript-9.20-cve-2017-8291.patch
+Patch20: ghostscript-9.20-cve-2017-7975.patch
 
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
 BuildRequires: xz
@@ -139,35 +147,66 @@ A GTK-enabled version of Ghostscript, called 'gsx'.
 %setup -q -n %{name}-%{gs_ver}
 rm -rf expat freetype icclib jasper jpeg jpegxr lcms lcms2 libpng openjpeg zlib cups/libs
 
-# Fix ijs-config not to have multilib conflicts (bug #192672)
-%patch1 -p1 -b .multilib
+%patch1 -p1
 
-# Fix some shell scripts
-%patch2 -p1 -b .scripts
+# Fix error when using 'convert' from ImageMagick, and
+# make sure the configuration in /etc/ghostscript/Fonts.local is used:
+%patch2 -p1
 
-# Build igcref.c with -O0 to work around bug #150771.
-%patch3 -p1 -b .noopt
+# Fix some shell scripts
+%patch3 -p1
 
-# Define .runlibfileifexists.
+# Use old names for urw-fonts (bug #1207577).
 %patch4 -p1
 
-# Fixed missing error check when setting ICC profile.
-%patch5 -p1 -b .icc-missing-check
-
+# security patches.
+# DSC parser - validate parameters (bug #1382305):
+%patch5 -p1
 
-# Restored Fontmap.local patch, incorrectly dropped after
-# ghostscript-8.15.4-3 (bug #610301).
-# Note: don't use -b here to avoid the backup file ending up in the
-# package manifest.
+# Add a file permissions callaback (bug #1382294):
 %patch6 -p1
 
-# Use more caution when converting floats to strings (bug #980085).
-%patch7 -p1 -b .wrf-snprintf
+# Reference count device icc profile (bug #1382300):
+%patch7 -p1
 
-%patch8 -p1 -b .system-openjpeg2
+# Check for sufficient params in .sethalftone5 (bug #1383940):
+%patch8 -p1
 
-# security patches.
-%patch1000 -p2 -b .fix696041
+# Honor -dSAFER in .libfile (bug #1380415):
+%patch9 -p1
+
+# handle GlyphDirectory as an array (http://bugs.ghostscript.com/show_bug.cgi?id=697286):
+%patch10 -p1
+
+# Remove (and re-implement) ConvertUTF.c because of licensing issues (bug #1404933):
+%patch11 -p1
+
+# Squash signed/unsigned warnings in MSVC jbig2 build (bug #1410021):
+%patch12 -p1
+
+# Check for null-pointer dereference in mem_get_bits_rectangle() (bug #1434497):
+%patch13 -p1
+
+# CVE-2016-10217 (bug #1441564):
+%patch14 -p1
+
+# CVE-2016-10218 (bug #1441568):
+%patch15 -p1
+
+# CVE-2016-10219 (bug #1441569):
+%patch16 -p1
+
+# CVE-2016-10220 (bug #1441571):
+%patch17 -p1
+
+# CVE-2017-5951 (bug #1441572):
+%patch18 -p1
+
+# CVE-2017-8291 (bug #1446063):
+%patch19 -p1
+
+# CVE-2017-7975 (bug #1443940):
+%patch20 -p1
 
 
 # Convert manual pages to UTF-8
@@ -370,12 +409,16 @@ rm -rf $RPM_BUILD_ROOT
 %{_includedir}/ghostscript/*.h
 %dir %{_includedir}/ijs
 %{_includedir}/ijs/*
-%{_bindir}/ijs-config
 %{_libdir}/pkgconfig/ijs.pc
 %{_libdir}/libijs.so
 %{_libdir}/libgs.so
 
 %changelog
+* Mon May  8 2017 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 9.20-1
+- new upstream release.
+- dropped all patches.
+- imported patches from rawhide.
+
 * Sun Aug  2 2015 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 9.15-2
 - added patch1000 to fix CVE-2015-3228.