ghostscript (10.07.1~dfsg-1ubuntu1) stonking; urgency=medium

  * Merge with Debian unstable (LP: #2153303). Remaining changes:
    - New re-packaging of Ghostscript 10.07.1, keeping the leptonica and
      tesseract convenience copies in as they are not in Ubuntu Main. Added
      appropriate remark to debian/copyright.
    - Also keep the lcms2mt convenience copy as it is heavily patched by
      Ghostscript's upstream developers, especially for multi-threading
      (mt) support.
    - Do not compile with Neon FPU support on 32-bit ARM (see also Debian bug
      #1012254). Otherwise we get FTBFS on armhf.
  * Dropped delta:
    - Build with fpic to avoid FTBFS
  * d/watch: switch to plain search to allow retrieving past releases.

 -- Simon Poirier <simon.poirier@canonical.com>  Wed, 27 May 2026 16:29:43 -0400

ghostscript (10.07.1~dfsg-1) unstable; urgency=medium

  * New upstream version
  * Standards-Version: 4.7.4 (routine-update)

 -- Steve M. Robbins <smr@debian.org>  Sun, 24 May 2026 14:37:46 -0500

ghostscript (10.07.0~dfsg-2) unstable; urgency=medium

  [ Steve Robbins ]
  * [16df20a] Revert "Add new symbols."

 -- Steve M. Robbins <smr@debian.org>  Sun, 22 Mar 2026 21:03:38 -0500

ghostscript (10.07.0~dfsg-1) unstable; urgency=medium

  [ Steve M. Robbins ]
  * New upstream version
  * Standards-Version: 4.7.3 (routine-update)
  * debputy lint --auto-fix (routine-update)
  * [f674e6f] refresh patches
  * [1b222ab] Add new symbols.
  * [dff4025] Clean doc/build.  Closes: #1045059 (thanks, Santiago Vila).
  * [24a5d9d] Remove now-obsolete kfreebsd-any arch strings

 -- Steve M. Robbins <smr@debian.org>  Sun, 22 Mar 2026 18:43:27 -0500

ghostscript (10.06.0~dfsg-3ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2130127). Remaining changes:
    - New re-packaging of Ghostscript 10.06.0, keeping the leptonica and
      tesseract convenience copies in as they are not in Ubuntu Main. Added
      appropriate remark to debian/copyright.
    - Also keep the lcms2mt convenience copy as it is heavily patched by
      Ghostscript's upstream developers, especially for multi-threading
      (mt) support.
    - Do not compile with Neon FPU support on 32-bit ARM (see also Debian bug
      #1012254). Otherwise we get FTBFS on armhf.
  * Dropped delta merged upstream:
    - Removed use of sphinxcontrib.googleanalytics Sphinx extension, the     extension is not available in Ubuntu.
    - SECURITY UPDATE: Information Leak
      debian/patches/CVE-2025-48708.patch: Argument sanitization handle '#' as per '='
      CVE-2025-48708
    - SECURITY UPDATE: null pointer deref on file write failure
      debian/patches/CVE-2025-7462.patch: catch a null file pointer closing
      pdfwrite in devices/vector/gdevpdf.c.
      CVE-2025-7462
    - SECURITY UPDATE: stack overflow in pdf_write_cmap
      debian/patches/CVE-2025-59798.patch: use dynamically allocated buffer
      and check return codes in devices/vector/gdevpdtw.c.
      CVE-2025-59798
    - SECURITY UPDATE: stack overflow in pdfmark_coerce_dest
      debian/patches/CVE-2025-59799.patch: bounds check some strings in
      devices/vector/gdevpdfm.c.
      CVE-2025-59799
    - SECURITY UPDATE: heap overflow in ocr_begin_page
      debian/patches/CVE-2025-59800.patch: fix int overflow in
      devices/gdevpdfocr.c.
      CVE-2025-59800
    - Build with -std=gnu17 to avoid FTBFS with GCC 15 (LP #2124948)
  * Build with fpic to avoid FTBFS

 -- Simon Poirier <simon.poirier@canonical.com>  Tue, 27 Jan 2026 22:07:12 -0500

ghostscript (10.06.0~dfsg-3) unstable; urgency=medium

  [ Steve Robbins ]
  * [703426f] Remove -Werror=declaration-after-statement to
    fix build on armhf.
  * [9258e4c] Fix two booleans that were meant to be integers

 -- Steve M. Robbins <smr@debian.org>  Tue, 30 Sep 2025 19:08:44 -0500

ghostscript (10.06.0~dfsg-2) unstable; urgency=medium

  [ Steve Robbins ]
  * [f3af481] Patch calls to check_64bit_multiply().
  * [da00d5b] Wrap overlong changelog line.

 -- Steve M. Robbins <smr@debian.org>  Mon, 29 Sep 2025 21:47:31 -0500

ghostscript (10.06.0~dfsg-1) unstable; urgency=medium

  * New upstream version
    - Closes: #1116443, #1116444.
  * Standards-Version: 4.7.2 (routine-update)
  * Reorder sequence of d/control fields by cme (routine-update)
  * Remove trailing whitespace in debian/changelog (routine-update)
    Update lintian override info format in d/source/lintian-overrides
    on line 2-12, 15.
  * [c267038] Remove patches applied upstream

 -- Steve M. Robbins <smr@debian.org>  Mon, 29 Sep 2025 08:37:38 -0500

ghostscript (10.05.1~dfsg-3) unstable; urgency=medium

  [ Steve Robbins ]
  * [fb1ee5b] Fixes for C23.
  * [4a94390] Additional fixes for C23.  Closes: #1096702

 -- Steve M. Robbins <smr@debian.org>  Sat, 06 Sep 2025 21:25:01 -0500

ghostscript (10.05.1~dfsg-2) unstable; urgency=medium

  [ Steve Robbins ]
  * [a7443cd] Upstream fix for CVE-2025-7462.  Closes: #1109270.
  * [510df70] Apply upstream patch that closes: #1101348.

 -- Steve M. Robbins <smr@debian.org>  Sun, 24 Aug 2025 14:57:41 -0500

ghostscript (10.05.1~dfsg-1) unstable; urgency=medium

  [ Steve Robbins ]
  * [592d479] New upstream version 10.05.1~dfsg

 -- Steve M. Robbins <smr@debian.org>  Sun, 04 May 2025 21:32:27 -0500

ghostscript (10.05.0dfsg1-0ubuntu5) resolute; urgency=medium

  * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)

 -- Sebastien Bacher <seb128@debian.org>  Fri, 06 Feb 2026 21:17:32 +0100

ghostscript (10.05.0dfsg1-0ubuntu4) questing; urgency=medium

  * SECURITY UPDATE: null pointer deref on file write failure
    - debian/patches/CVE-2025-7462.patch: catch a null file pointer closing
      pdfwrite in devices/vector/gdevpdf.c.
    - CVE-2025-7462
  * SECURITY UPDATE: stack overflow in pdf_write_cmap
    - debian/patches/CVE-2025-59798.patch: use dynamically allocated buffer
      and check return codes in devices/vector/gdevpdtw.c.
    - CVE-2025-59798
  * SECURITY UPDATE: stack overflow in pdfmark_coerce_dest
    - debian/patches/CVE-2025-59799.patch: bounds check some strings in
      devices/vector/gdevpdfm.c.
    - CVE-2025-59799
  * SECURITY UPDATE: heap overflow in ocr_begin_page
    - debian/patches/CVE-2025-59800.patch: fix int overflow in
      devices/gdevpdfocr.c.
    - CVE-2025-59800

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 25 Sep 2025 12:14:26 -0400

ghostscript (10.05.0dfsg1-0ubuntu3) questing; urgency=medium

  * Build with -std=gnu17 to avoid FTBFS with GCC 15 (LP: #2124948)

 -- Graham Inggs <ginggs@ubuntu.com>  Wed, 24 Sep 2025 14:24:58 +0000

ghostscript (10.05.0dfsg1-0ubuntu2) questing; urgency=medium

  * SECURITY UPDATE: Information Leak
    - debian/patches/CVE-2025-48708.patch: Argument sanitization handle
      '#' as per '='
    - CVE-2025-48708

 -- Bruce Cable <bruce.cable@canonical.com>  Thu, 03 Jul 2025 15:29:54 +1000

ghostscript (10.05.0dfsg1-0ubuntu1) plucky; urgency=low

  * New upstream version 10.05.0dfsg1

 -- Till Kamppeter <till.kamppeter@gmail.com>  Wed, 12 Mar 2025 22:22:22 +0100

ghostscript (10.05.0~rc1~dfsg1-0ubuntu1) plucky; urgency=low

  * New upstream version 10.05.0~rc1~dfsg1
  * Refreshed patches.
  * Removed use of sphinxcontrib.googleanalytics Sphinx extension, the
    extension is not available in Ubuntu.

 -- Till Kamppeter <till.kamppeter@gmail.com>  Thu, 20 Feb 2025 18:35:22 +0100

ghostscript (10.05.0~dfsg-1) unstable; urgency=medium

  [ Steve Robbins ]
  * [825db8d] New upstream version 10.05.0~dfsg.
    - Doc fixes; closes: #1092118, #1090082, #1089859, #1076834.
    - Fix armel generation; closes: #1085120.
    - Fix xml attachment; closes: #1091182.

 -- Steve M. Robbins <smr@debian.org>  Sun, 16 Mar 2025 15:03:16 -0500

ghostscript (10.04.0~dfsg1-2ubuntu1) plucky; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - New re-packaging of Ghostscript 10.04.0, keeping the leptonica and
      tesseract convenience copies in as they are not in Ubuntu Main. Added
      appropriate remark to debian/copyright.
    - Also keep the lcms2mt convenience copy as it is heavily patched by
      Ghostscript's upstream developers, especially for multi-threading
      (mt) support.
    - Do not compile with Neon FPU support on 32-bit ARM (see also Debian bug
      #1012254). Otherwise we get FTBFS on armhf.
  * Drop CVE* patches, included upstream.
  * Refreshed remaining patches with quilt.

 -- Till Kamppeter <till.kamppeter@gmail.com>  Thu, 13 Feb 2025 22:22:22 +0100

ghostscript (10.04.0~dfsg-2) unstable; urgency=medium

  [ Brian Clinkenbeard ]
  * [e88d528] Use nodoc and nocheck build profiles.  Closes: #1079668.

  [ Steve Robbins ]
  * [1daaa82] Create links for example files PDF{A,X}_def.ps in
    /usr/share/doc/libgs10/examples.  Closes: #961909.
  * [d7e5887] mailcap entry supplied by Kevin Ryde.  Closes: #723712.

 -- Steve M. Robbins <smr@debian.org>  Wed, 27 Nov 2024 22:59:03 -0600

ghostscript (10.04.0~dfsg-1) unstable; urgency=medium

  [ Steve Robbins ]
  * [c78073e] New upstream version 10.04.0~dfsg
  * [6e6562a] Remove upstream patch, now applied.

 -- Steve M. Robbins <smr@debian.org>  Sat, 21 Sep 2024 18:22:44 -0500

ghostscript (10.03.1~dfsg1-0ubuntu4) plucky; urgency=medium

  * No-change rebuild for libpaper.

 -- Sudip Mukherjee <sudipm.mukherjee@gmail.com>  Sun, 22 Dec 2024 15:02:26 +0000

ghostscript (10.03.1~dfsg1-0ubuntu3) plucky; urgency=medium

  * SECURITY UPDATE: incorrect Pattern Implementation type handling
    - debian/patches/CVE-2024-46951.patch: check the type of the Pattern
      Implementation in psi/zcolor.c.
    - CVE-2024-46951
  * SECURITY UPDATE: Buffer overflow in PDF XRef stream
    - debian/patches/CVE-2024-46952.patch: sanitise W array values in Xref
      streams in pdf/pdf_xref.c.
    - CVE-2024-46952
  * SECURITY UPDATE: output filename overflow
    - debian/patches/CVE-2024-46953.patch: check for overflow validating
      format string for the output file name in base/gsdevice.c.
    - CVE-2024-46953
  * SECURITY UPDATE: directory escape via overlong encodings
    - debian/patches/CVE-2024-46954.patch: fix decode_utf8 to forbid
      overlong encodings in base/gp_utf8.c.
    - CVE-2024-46954
  * SECURITY UPDATE: Out of bounds read when reading color
    - debian/patches/CVE-2024-46955.patch: check Indexed colour space index
      in psi/zcolor.c.
    - CVE-2024-46955
  * SECURITY UPDATE: incorrect buffer length check
    - debian/patches/CVE-2024-46956.patch: fix length check in psi/zfile.c.
    - CVE-2024-46956

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 06 Nov 2024 11:08:51 -0500

ghostscript (10.03.1~dfsg1-0ubuntu2) oracular; urgency=low

  * Do not compile with Neon FPU support on 32-bit ARM (see also Debian bug
    #1012254). Otherwise we get FTBFS on armhf.

 -- Till Kamppeter <till.kamppeter@gmail.com>  Mon, 12 Aug 2024 00:00:01 +0200

ghostscript (10.03.1~dfsg1-0ubuntu1) oracular; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - New re-packaging of Ghostscript 10.03.1, keeping the leptonica and
      tesseract convenience copies in as they are not in Ubuntu Main. Added
      appropriate remark to debian/copyright.
    - Also keep the lcms2mt convenience copy as it is heavily patched by
      Ghostscript's upstream developers, especially for multi-threading
      (mt) support.
  * Drop CVE* patches, included upstream.

 -- Till Kamppeter <till.kamppeter@gmail.com>  Thu, 10 Aug 2024 20:46:21 +0200

ghostscript (10.03.1~dfsg-2) unstable; urgency=medium

  [ Steve Robbins ]
  * [47970c5] Upstream fix for gcc-14 build error.  Closes: #1074996.

 -- Steve M. Robbins <smr@debian.org>  Wed, 24 Jul 2024 18:47:50 -0500

ghostscript (10.03.1~dfsg-1) unstable; urgency=medium

  [ Steve Robbins ]
  * [a82a848] New upstream version 10.03.1~dfsg

 -- Steve M. Robbins <smr@debian.org>  Mon, 27 May 2024 22:22:53 -0500

ghostscript (10.03.1~dfsg~git20240518-1) unstable; urgency=medium

  [ Steve Robbins ]
  * [2e5797b] New upstream version 10.03.1~dfsg~git20240518, built from
    upstream git commit 7145885041bb52cc23964f0aa2aec1b1c82b5908

 -- Steve M. Robbins <smr@debian.org>  Sat, 18 May 2024 19:24:20 -0500

ghostscript (10.03.0~dfsg-1) unstable; urgency=medium

  [ Steve Robbins ]
  * [d50c139] Add "breaks" relationship with manpages-l10n to transition
    German manpages. Closes: #1065396.
  * [9adc766] Simplify ps2ascii script. Closes: #992893.
  * [15664c9] New upstream version 10.03.0~dfsg
  * [2396e20] Remove 0001_fix_pagelist.patch, applied in new version.
  * [e3b0739] Add build-dep on python3-sphinx-copybutton
  * [ff6b89f] Fix break relationship versioning.
  * [2020bbc] Update obsolete dependency package names.

 -- Steve M. Robbins <smr@debian.org>  Thu, 21 Mar 2024 22:44:42 -0500

ghostscript (10.02.1~dfsg1-0ubuntu9) oracular; urgency=medium

  * debian/patches/CVE-2024-29511-2.patch: original fix was overly
    aggressive in devices/gdevocr.c, devices/gdevpdfocr.c,
    devices/vector/gdevpdf.c, devices/vector/gdevpdfp.c.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 11 Jul 2024 12:25:28 -0400

ghostscript (10.02.1~dfsg1-0ubuntu8) oracular; urgency=medium

  [ Marc Deslauriers }
  * SECURITY UPDATE: stack-based buffer overflow via long PDF filter name
    - debian/patches/CVE-2024-29506.patch: don't allow PDF files with bad
      Filters to overflow the debug buffer in pdf/pdf_file.c.
    - CVE-2024-29506
  * SECURITY UPDATE: stack-based buffer overflows
    - debian/patches/CVE-2024-29507.patch: bounds checks when using CIDFont
      related params in pdf/pdf_font.c, pdf/pdf_warnings.h.
    - CVE-2024-29507
  * SECURITY UPDATE: heap-based pointer disclosure via constructed BaseFont
    name
    - debian/patches/CVE-2024-29508.patch: review printing of pointers in
      base/gsfont.c, base/gsicc_cache.c, base/gsmalloc.c, base/gxclmem.c,
      base/gxcpath.c, base/gxpath.c, base/szlibc.c, devices/gdevupd.c,
      devices/vector/gdevpdtb.c, psi/ialloc.c, psi/igc.c, psi/igcstr.c,
      psi/iinit.c, psi/imainarg.c, psi/isave.c, psi/iutil.c.
    - debian/patches/CVE-2024-29508-2.patch: fix compiler warning in
      optimised build in base/gsicc_cache.c.
    - debian/patches/CVE-2024-29508-3.patch: remove extra arguments in
      devices/gdevupd.c.
    - CVE-2024-29508
  * SECURITY UPDATE: heap-based overflow via PDFPassword with null byte
    - debian/patches/CVE-2024-29509.patch: don't use strlen on passwords in
      pdf/pdf_sec.c.
    - CVE-2024-29509
  * SECURITY UPDATE: directory traversal issue via OCRLanguage
    - debian/patches/CVE-2024-29511.patch: reject OCRLanguage changes after
      SAFER enabled in devices/gdevocr.c, devices/gdevpdfocr.c,
      devices/vector/gdevpdfp.c.
    - CVE-2024-29511

  [ Chris Kim ]
  * SECURITY UPDATE: Arbitrary code execution via uniprint device
    - debian/patches/CVE-2024-29510.patch: Prevent changes to uniprint device
      argument strings after SAFER is activated in gdevupd.c.
    - CVE-2024-29510
  * SECURITY UPDATE: Path traversal and arbitrary code execution via improperly
    checked path arguments
    - debian/patches/CVE-2024-33869-part1.patch: Check that a current working
      directory specifier is valid before stripping it from gpmisc.c.
    - debian/patches/CVE-2024-33869-part2.patch: Check that a current working
      directory specifier is valid before stripping it from gpmisc.c.
    - CVE-2024-33869
  * SECURITY UPDATE: Path traversal via improperly checked path arguments
    - debian/patches/CVE-2024-33870.patch: Add a check for parent directory
      prefixes when handling relative paths in gpmisc.c.
    - CVE-2024-33870
  * SECURITY UPDATE: Arbitrary code execution via custom driver library
    - debian/patches/CVE-2024-33871.patch: Prevent changes to parameter that 
      specifies the names of dynamic libraries to be loaded by the opvp/oprp
      device in gdevopvp.c
    - CVE-2024-33871

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 10 Jul 2024 13:28:20 -0400

ghostscript (10.02.1~dfsg1-0ubuntu7) noble; urgency=high

  * No change rebuild against libcups2t64, libpng16-16t64, libxt6t64.

 -- Julian Andres Klode <juliank@ubuntu.com>  Mon, 08 Apr 2024 16:39:44 +0200

ghostscript (10.02.1~dfsg1-0ubuntu6) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sat, 30 Mar 2024 23:49:24 +0000

ghostscript (10.02.1~dfsg1-0ubuntu5) noble; urgency=medium

  * No-change rebuild against libcups2t64.

 -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 20 Mar 2024 13:48:31 +1300

ghostscript (10.02.1~dfsg1-0ubuntu4) noble; urgency=medium

  * No-change rebuild against libxt6t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sat, 09 Mar 2024 00:49:00 +0000

ghostscript (10.02.1~dfsg1-0ubuntu3) noble; urgency=medium

  * Merge from Debian unstable. Remaining changes:
    - New re-packaging of Ghostscript 10.02.1, keeping the leptonica and
      tesseract convenience copies in as they are not in Ubuntu Main. Added
      appropriate remark to debian/copyright.
    - Also keep the lcms2mt convenience copy as it is heavily patched by
      Ghostscript's upstream developers, especially for multi-threading
      (mt) support.

  [ наб ]
  * [ee3d1ac] Simplify /sbin/update-gsfontmap (Closes: #992889)

  [ Steve Robbins ]
  * [ccc0e3c] Explicitly set font map files to be world readable.
    Closes: #740959.
  * [5fce3d3] Add suggestion for package texlive-binaries, needed to use dvipdf. Closes: #782901.
  * [9ab8028] ghostscript: add conflicts to ghostcript-x to allow removal of the obsolete transitional package. Closes: #1053377

 -- Till Kamppeter <till.kamppeter@gmail.com>  Thu, 29 Feb 2024 01:30:05 +0100

ghostscript (10.02.1~dfsg1-0ubuntu2) noble; urgency=medium

  * Merge from Debian unstable. Remaining changes:
    - New re-packaging of Ghostscript 10.02.1, keeping the leptonica and
      tesseract convenience copies in as they are not in Ubuntu Main. Added
      appropriate remark to debian/copyright.
    - Also keep the lcms2mt convenience copy as it is heavily patched by
      Ghostscript's upstream developers, especially for multi-threading
      (mt) support.

  [ Steve Robbins ]
  * [4b077b5] Incorporate upstream patch to fix PageList processing in PDF
    handler.  Closes: #1052652
  * [b4524f9] New maintainer.  Closes: #1022718, #1036869.

 -- Till Kamppeter <till.kamppeter@gmail.com>  Sat, 06 Jan 2024 19:16:05 -0300

ghostscript (10.02.1~dfsg1-0ubuntu1) noble; urgency=medium

  * Merge from Debian unstable. Remaining changes:
    - New re-packaging of Ghostscript 10.02.1, keeping the leptonica and
      tesseract convenience copies in as they are not in Ubuntu Main. Added
      appropriate remark to debian/copyright.
    - Also keep the lcms2mt convenience copy as it is heavily patched by
      Ghostscript's upstream developers, especially for multi-threading
      (mt) support.
  * Drop CVE* patches, included upstream.

 -- Till Kamppeter <till.kamppeter@gmail.com>  Thu, 07 Dec 2023 19:05:05 +0100

ghostscript (10.02.1~dfsg-3) unstable; urgency=medium

  [ наб ]
  * [ee3d1ac] Simplify /sbin/update-gsfontmap (Closes: #992889)

  [ Steve Robbins ]
  * [ccc0e3c] Explicitly set font map files to be world readable.
    Closes: #740959.
  * [5fce3d3] Add suggestion for package texlive-binaries, needed to use
    dvipdf. Closes: #782901.
  * [9ab8028] ghostscript: add conflicts to ghostcript-x to allow removal of
    the obsolete transitional package. Closes: #1053377

 -- Steve M. Robbins <smr@debian.org>  Sat, 20 Jan 2024 15:44:07 -0600

ghostscript (10.02.1~dfsg-2) unstable; urgency=medium

  [ Steve Robbins ]
  * [4b077b5] Incorporate upstream patch to fix PageList processing in PDF
    handler.  Closes: #1052652
  * [b4524f9] New maintainer.  Closes: #1022718, #1036869.

 -- Steve M. Robbins <smr@debian.org>  Sat, 06 Jan 2024 01:16:23 -0600

ghostscript (10.02.1~dfsg-1) unstable; urgency=medium

  * QA upload

  [ upstream ]
  * new release(s)

  [ Jonas Smedegaard ]
  * update copyright info: update coverage

 -- Jonas Smedegaard <dr@jones.dk>  Wed, 08 Nov 2023 08:36:16 +0100

ghostscript (10.02.0~dfsg-2) unstable; urgency=medium

  * QA upload

  * declare that ghostscript replaces older ghostscript-x

 -- Jonas Smedegaard <dr@jones.dk>  Thu, 14 Sep 2023 06:37:04 +0200

ghostscript (10.02.0~dfsg-1) unstable; urgency=medium

  * QA upload

  [ upstream ]
  * new release(s)

  [ Jonas Smedegaard ]
  * update copyright info: update coverage
  * refresh patches;
    update DEP-3 patch headers
  * drop obsolete binary packages ghostscript-x libgs9-common;
    have binary package ghostscript provide ghostscript-x

 -- Jonas Smedegaard <dr@jones.dk>  Wed, 13 Sep 2023 20:18:16 +0200

ghostscript (10.01.2~dfsg1-0ubuntu2.1) mantic-security; urgency=medium

  * SECURITY UPDATE: code execution via PS documents and IJS device
    - debian/patches/CVE-2023-43115.patch: prevent PostScript programs
      switching to the IJS device after SAFER has been activated in
      devices/gdevijs.c.
    - CVE-2023-43115

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 12 Oct 2023 08:59:19 -0400

ghostscript (10.01.2~dfsg1-0ubuntu2) mantic; urgency=medium

  * SECURITY UPDATE: buffer overflow
    - debian/patches/CVE-2023-38559.patch: bounds check the buffer prior to
      deferencing the pointer in devn_pcx_write_rle() in base/gdevdevn.c.
    - CVE-2023-38559

 -- Allen Huang <allen.huang@canonical.com>  Thu, 21 Sep 2023 17:06:57 +0200

ghostscript (10.01.2~dfsg1-0ubuntu1) mantic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - New re-packaging of Ghostscript 10.00.0, keeping the leptonica and
      tesseract convenience copies in as they are not in Ubuntu Main. Added
      appropriate remark to debian/copyright.
    - Also keep the lcms2mt convenience copy as it is heavily patched by
      Ghostscript's upstream developers, especially for multi-threading
      (mt) support.

 -- Till Kamppeter <till.kamppeter@gmail.com>  Wed, 16 Aug 2023 21:08:15 +0200

ghostscript (10.01.2~dfsg-1) unstable; urgency=medium

  * QA upload

  [ upstream ]
  * new release(s)

  [ Jonas Smedegaard ]
  * fix source helper tool copyright-check to avoid insecure shell expansion
  * fix source helper tool copyright-check to work with Path::Tiny 0.144
  * declare compliance with Debian Policy 4.6.2
  * update copyright info: extend repackaging to exclude images containing
    non-DFSG ICC profile
  * drop patches obsoleted by upstream changes
  * unfuzz patches

 -- Jonas Smedegaard <dr@jones.dk>  Thu, 22 Jun 2023 08:15:42 +0200

ghostscript (10.0.0~dfsg1-0ubuntu2) mantic; urgency=medium

  * SECURITY UPDATE: incorrect permission validation for pipe devices
    - debian/patches/CVE-2023-36664-1.patch: don't reduce pipe file names
      for permission validation in base/gpmisc.c, base/gslibctx.c.
    - debian/patches/CVE-2023-36664-2.patch: fix logic and add extra test
      in base/gpmisc.c, base/gslibctx.c.
    - CVE-2023-36664

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 05 Jul 2023 12:45:07 -0400

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libgs-common`.
