wok diff ghostscript/receipt @ rev 25678

Patch ghostscript CVE-2023-36664
author Stanislas Leduc <shann@slitaz.org>
date Fri Mar 08 14:12:03 2024 +0100 (2 months ago)
parents 8691816c33c5
children e52dec9fb56b
line diff
     1.1 --- a/ghostscript/receipt	Wed Mar 02 07:43:51 2022 +0100
     1.2 +++ b/ghostscript/receipt	Fri Mar 08 14:12:03 2024 +0100
     1.3 @@ -11,13 +11,13 @@
     1.4  TARBALL="$PACKAGE-$VERSION.tar.xz"
     1.5  WGET_URL="https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs${VERSION//./}/$TARBALL"
     1.6  
     1.7 -DEPENDS="cups expat fontconfig freetype gcc83-lib-base gnutls gtk+ jasper 
     1.8 +DEPENDS="cups expat fontconfig freetype gnutls gtk+ jasper 
     1.9  	jbig2dec jpeg libgcrypt libgpg-error libpng tiff xorg-libICE 
    1.10  	xorg-libSM xorg-libX11 xorg-libXau xorg-libXdmcp xorg-libXext 
    1.11  	xorg-libXt zlib" 
    1.12  # build depends are optional ; ghostscripts still build but does not compile in cups support
    1.13  BUILD_DEPENDS="cairo-dev cups-dev expat-dev fontconfig-dev freetype-dev 
    1.14 -	gcc83 gnutls-dev gtk+-dev jasper-dev jbig2dec jpeg-dev libgcrypt-dev 
    1.15 +	gnutls-dev gtk+-dev jasper-dev jbig2dec jpeg-dev libgcrypt-dev 
    1.16  	libgpg-error-dev libpng-dev tiff-dev zlib-dev"
    1.17  
    1.18  # What is the latest version available today?
    1.19 @@ -33,10 +33,12 @@
    1.20  	# force it to use system-libs
    1.21  	rm -rf jpeg libpng zlib jasper expat
    1.22  
    1.23 +	# Patch for CVE-2023-36664
    1.24 +	patch -p1 < $stuff/CVE-2023-36664-1.patch
    1.25 +	patch -p1 < $stuff/CVE-2023-36664-2.patch
    1.26 +
    1.27  	# --disable-compile-inits is needed for linking with system-zlib
    1.28  	./configure								\
    1.29 -		CC=gcc-83							\
    1.30 -		CXX=g++-83							\
    1.31  		--prefix=/usr							\
    1.32  		--infodir=/usr/share/info					\
    1.33  		--mandir=/usr/share/man						\