diff options
| author | Chris Liddell <chris.liddell@artifex.com> | 2018-11-20 09:51:17 +0000 |
|---|---|---|
| committer | Chris Liddell <chris.liddell@artifex.com> | 2018-11-20 09:59:43 +0000 |
| commit | 8efbedbab72687cb51e3c353d5665d00120eed4a (patch) | |
| tree | fef23d200236813193384f96a1a5340960129b95 | |
| parent | e5978ae6d1e4f3dee0a2838ed580b0373e102613 (diff) | |
| download | ghostpdl-gs9.26.tar.gz | |
Dates, changelog, etc for 9.26 releaseghostscript-9.26ghostpdl-9.26gs9.26
43 files changed, 481 insertions, 65 deletions
diff --git a/base/gscdef.c b/base/gscdef.c index 5feb4f030..df27a4458 100644 --- a/base/gscdef.c +++ b/base/gscdef.c @@ -51,7 +51,7 @@ gs_program_family_name(void) #ifndef GS_PRODUCT # define GS_PRODUCT\ - GS_PRODUCTFAMILY " RELEASE CANDIDATE 1" + GS_PRODUCTFAMILY "" #endif const char *const gs_product = GS_PRODUCT; diff --git a/base/version.mak b/base/version.mak index 94fc29665..cc0543409 100644 --- a/base/version.mak +++ b/base/version.mak @@ -18,7 +18,7 @@ GS_VERSION_MAJOR=9 GS_VERSION_MINOR=26 GS_VERSION_MINOR0=26 # Revision date: year x 10000 + month x 100 + day. -GS_REVISIONDATE=20180913 +GS_REVISIONDATE=20181120 # Derived values GS_VERSION=$(GS_VERSION_MAJOR)$(GS_VERSION_MINOR0) GS_DOT_VERSION=$(GS_VERSION_MAJOR).$(GS_VERSION_MINOR0) diff --git a/doc/DLL.htm b/doc/DLL.htm index 90c078a13..36b1eb982 100644 --- a/doc/DLL.htm +++ b/doc/DLL.htm @@ -776,7 +776,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Deprecated.htm b/doc/Deprecated.htm index aab210566..4f0ae6b8c 100644 --- a/doc/Deprecated.htm +++ b/doc/Deprecated.htm @@ -5773,7 +5773,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Develop.htm b/doc/Develop.htm index 64645ca33..bde485394 100644 --- a/doc/Develop.htm +++ b/doc/Develop.htm @@ -4782,7 +4782,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Devices.htm b/doc/Devices.htm index 70b752236..72e29656a 100644 --- a/doc/Devices.htm +++ b/doc/Devices.htm @@ -1989,7 +1989,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Drivers.htm b/doc/Drivers.htm index 9e8b46a70..7ff0ee60a 100644 --- a/doc/Drivers.htm +++ b/doc/Drivers.htm @@ -3678,7 +3678,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Fonts.htm b/doc/Fonts.htm index 62d90b6d4..a9690434b 100644 --- a/doc/Fonts.htm +++ b/doc/Fonts.htm @@ -357,7 +357,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/History9.htm b/doc/History9.htm index d7998924f..3b642f6db 100644 --- a/doc/History9.htm +++ b/doc/History9.htm @@ -79,7 +79,7 @@ TOC to see how to edit it for visual conciseness. <h2>Table of contents</h2> <blockquote><ul> -<li><a href="#Version9.25">Version 9.26 (2018-11-07)</a> +<li><a href="#Version9.25">Version 9.26 (2018-11-20)</a> <li><a href="#Version9.25">Version 9.25 (2018-09-13)</a> <li><a href="#Version9.24">Version 9.24 (2018-09-03)</a> <li><a href="#Version9.23">Version 9.23 (2018-03-21)</a> @@ -131,15 +131,10 @@ overview</a>. <!-- [1.0 end visible header] ============================================== --> <!-- [2.0 begin contents] ================================================== --> -<h2><a name="Version9.26"></a>Version 9.26 (2018-11-07)</h2> +<h2><a name="Version9.26"></a>Version 9.26 (2018-11-20)</h2> <p> Highlights in this release include: <ul> <li> -<p>This release fixes problems with argument handling, some unintended results of -the security fixes to the SAFER file access restrictions (specifically accessing -ICC profile files), and some additional security issues over the recent 9.24 release. -</li> -<li> <p>Security issues have been the primary focus of this release, including solving several (well publicised) real and potential exploits. <br> @@ -147,10 +142,6 @@ several (well publicised) real and potential exploits. release to avoid these issues.</u></big> </li> <li> -<p>As well as Ghostscript itself, jbig2dec has had a significant amount of work improving -its robustness in the face of out specification files. -</li> -<li> <p>IMPORTANT: We are in the process of forking LittleCMS. LCMS2 is not thread safe, and cannot be made thread safe without breaking the ABI. Our fork will be thread safe, and include performance enhancements (these changes have all be been offered and rejected upstream). We @@ -158,6 +149,11 @@ will maintain compatibility between Ghostscript and LCMS2 for a time, but not in Our fork will be available as its own package separately from Ghostscript (and MuPDF). </li> <li> +<p>Thanks to Man Yue Mo of Semmle Security Research Team, Jens Müller of +Ruhr-Universität Bochum and Tavis Ormandy of Google's Project Zero for their help to +identify specific security issues. +</li> +<li> <p>The usual round of bug fixes, compatibility changes, and incremental improvements. </li> </ul> @@ -171,6 +167,431 @@ please visit <a href="http://bugs.ghostscript.com/">bugs.ghostscript.com</a>. </li> </ul> <h3><a name="9.26_changelog"></a>Changelog</h3> +<p><strong>2018-11-20 09:51:17 +0000 +</strong> +<br>Chris Liddell <chris.liddell@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=d66acfae372e39e8cbc4ce6395b4451cac72516e">d66acfae372e39e8cbc4ce6395b4451cac72516e</a> +<blockquote> +<p> + Dates etc for 9.26 release<br> +<br> +base/gscdef.c<br> +base/version.mak<br> +doc/DLL.htm<br> +doc/Deprecated.htm<br> +doc/Develop.htm<br> +doc/Devices.htm<br> +doc/Drivers.htm<br> +doc/Fonts.htm<br> +doc/History9.htm<br> +doc/Install.htm<br> +doc/Language.htm<br> +doc/Lib.htm<br> +doc/Make.htm<br> +doc/News.htm<br> +doc/Ps-style.htm<br> +doc/Ps2epsi.htm<br> +doc/Psfiles.htm<br> +doc/Readme.htm<br> +doc/Release.htm<br> +doc/SavedPages.htm<br> +doc/Source.htm<br> +doc/Unix-lpr.htm<br> +doc/Use.htm<br> +doc/VectorDevices.htm<br> +doc/WhatIsGS.htm<br> +doc/gs-vms.hlp<br> +doc/sample_downscale_device.htm<br> +doc/subclass.htm<br> +doc/thirdparty.htm<br> +man/dvipdf.1<br> +man/gs.1<br> +man/gslp.1<br> +man/gsnd.1<br> +man/pdf2dsc.1<br> +man/pdf2ps.1<br> +man/pf2afm.1<br> +man/pfbtopfa.1<br> +man/printafm.1<br> +man/ps2ascii.1<br> +man/ps2epsi.1<br> +man/ps2pdf.1<br> +man/ps2pdfwr.1<br> +man/ps2ps.1<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-19 09:28:41 +0000 +</strong> +<br>Chris Liddell <chris.liddell@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=e5978ae6d1e4f3dee0a2838ed580b0373e102613">e5978ae6d1e4f3dee0a2838ed580b0373e102613</a> +<blockquote> +<p> + Coverity CIDs: 326829, 326828 and 326827<br> +<br> + Check return values for gdev_prn_open_printer()<br> +<br> +contrib/gdevgdi.c<br> +contrib/japanese/gdevrpdl.c<br> +devices/gdevdjet.c<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-19 09:00:54 +0000 +</strong> +<br>Ken Sharp <ken.sharp@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=a4228a0d8d657fca3bb3becb93a43fae061beae8">a4228a0d8d657fca3bb3becb93a43fae061beae8</a> +<blockquote> +<p> + Coverity ID 327264 - move pointer NULL check<br> +<br> + Due to recent changes in this code, the pointer was being dereferenced<br> + before we checked it to see if it was NULL. Moe the check so that we<br> + check for NULL before dereferencing.<br> +<br> + The 'pvalue' of the operand can be NULL, even if the object is a t_device<br> + type, because invalidate_stack_devices traverses the operand stack<br> + looking for devices, and sets their pvalue member to NULL in order to<br> + invalidate them so that they cannot be used.<br> +<br> +psi/zdevice.c<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-17 11:20:08 +0000 +</strong> +<br>Ken Sharp <ken.sharp@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=c796ccb512ac581f5ac492fda8807d41769c47e8">c796ccb512ac581f5ac492fda8807d41769c47e8</a> +<blockquote> +<p> + Check structure types when using the r_ptr macro<br> +<br> + Two more places where we were using the r_ptr macro to cast a PostScript<br> + ref object into a structure without thoroughly checking that the object<br> + was in fact a structure of the correct type.<br> +<br> + One case did a partial check, but this is more robust.<br> +<br> +base/gsfcid2.c<br> +base/gsfcmap.c<br> +psi/zdscpars.c<br> +psi/zfcmap.c<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-17 10:00:32 +0000 +</strong> +<br>Ken Sharp <ken.sharp@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=cb9bb72643e95383bcacd88ab718565f3df9a510">cb9bb72643e95383bcacd88ab718565f3df9a510</a> +<blockquote> +<p> + Coverity ID 94865<br> +<br> + This had already been tackled, but it turns out there were a couple<br> + more places where tempnames wasn't freed, but Coverity only seems to<br> + flag them one at a time.<br> +<br> +psi/imain.c<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-17 09:37:07 +0000 +</strong> +<br>Ken Sharp <ken.sharp@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=c69827c308b608719d786fc14c8518af4dd6b335">c69827c308b608719d786fc14c8518af4dd6b335</a> +<blockquote> +<p> + Coverity ID 323322<br> +<br> + The new 'transform_pixel_region' method default for forwarding devices<br> + tests the target device to see if its NULL (some forwarding devices are<br> + not always forwarding devices, eg bbox), and if it is NULL then instead<br> + of passing the call to the target device it calls the graphics library<br> + default.<br> +<br> + Unfortunately it was passing the target device as an argument, and this<br> + is now certain to be NULL. In gx_default_transform_pixel_region_begin()<br> + we then dereference the pointer which would cause a crash.<br> +<br> + So instead, pass the device itself when its not actually a forwarding<br> + device.<br> +<br> + Also, some white space changes.<br> +<br> +base/gdevnfwd.c<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-15 15:24:10 +0000 +</strong> +<br>Ken Sharp <ken.sharp@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4548ceaf5ada7f7a4c4da5907e27fec62c1ce63d">4548ceaf5ada7f7a4c4da5907e27fec62c1ce63d</a> +<blockquote> +<p> + PS interpreter - check infinite result on exp, where possible<br> +<br> + Bug #700181 "using exp with 0 as base" (again)<br> +<br> + The reporter for the bug failed to mention this condition in the<br> + original report. Technically we don't always have isinf() available<br> + (I suspect all real compilers do these days) but where we do we can<br> + check the result. Where we don't, we're stuck. This mimics the<br> + behaviour of other math operations in Ghostscript.<br> +<br> +psi/zmath.c<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-15 14:18:17 +0000 +</strong> +<br>Ken Sharp <ken.sharp@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=a4e3cb230bfdbf9cb5a0d30763889e58f8215ed1">a4e3cb230bfdbf9cb5a0d30763889e58f8215ed1</a> +<blockquote> +<p> + PDF interpreter - use Appearance streams for highlight annotations<br> +<br> + We were previously never using the Appearance stream for a highlight<br> + annotation, which is documented as incorrect in the PDF 2.0 spec.<br> +<br> + The reason we were not using it is because a very few PDF files render<br> + differently if we do. This is because Acrobat 'sometimes', and I cannot<br> + figure out the conditions for htis, ignores a perfectly valid Appearance<br> + and generates a new one.<br> +<br> + In this case a customer produced a file where the QuadPoints entry is<br> + incorrect. If we use the Appearance stream (as Acrobat does) then the<br> + rendering is correct. If we generate an appearance then, because the<br> + QuadPoints are incorrect, the rendering is incorrect.<br> +<br> + Since the PDF 2.0 specification now makes it clear that we should be<br> + using a supplied Appearance stream, I've chosen to change the behaviour<br> + so that we do.<br> +<br> + I've also made the text for an appearance stream slightly more robust<br> + and general.<br> +<br> + This does produce a few diffs, because of the afore-mentioned files. In<br> + my opinion Acrobat is incorrect in how it treats these files. Our new<br> + rendering is correct.<br> +<br> +Resource/Init/pdf_draw.ps<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-14 21:04:46 +0000 +</strong> +<br>Chris Liddell <chris.liddell@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=e8be28b49c6a43db1861119288933b5a8fdbef73">e8be28b49c6a43db1861119288933b5a8fdbef73</a> +<blockquote> +<p> + Bug 700176: Use the actual output device for both devices in setdevice<br> +<br> + Also fixes bug 700189.<br> +<br> + The pdf14 compositor device, despite being a forwarding device, does not forward<br> + all spec_ops to it's target, only a select few are special cased for that.<br> + gxdso_current_output_device needs to be included in those special cases.<br> +<br> + The original commit (661e8d8fb8248) changed the code to use the spec_op to<br> + retrieve the output device, checking that for LockSafetyParams. If<br> + LockSafetyParams is set, it returns an invalidaccess error if the new device<br> + differs from the current device.<br> +<br> + When we do the comparison between the two devices, we need to check the<br> + output device in both cases.<br> +<br> + This is complicated by the fact that the new device may not have ever been set<br> + (and thus fully initialised), and may not have a spec_op method available at<br> + that point.<br> +<br> +base/gdevp14.c<br> +psi/zdevice.c<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-14 16:01:51 +0000 +</strong> +<br>Ken Sharp <ken.sharp@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=5db929cf393fa330bf916da37f5d2a5954a3b0c3">5db929cf393fa330bf916da37f5d2a5954a3b0c3</a> +<blockquote> +<p> + PS interpreter - in seticcspace, ensure the ICC dictionary is a dict<br> +<br> + From a review of dict_find_string, that function does not check to see<br> + if the object it is passed as an argument is a dictionary, so its<br> + essential to make sure the argument is checked before calling.<br> +<br> + This is the only remaining case I could find.<br> +<br> +psi/zcolor.c<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-13 04:18:21 +0100 +</strong> +<br>Sebastian Rasmussen <sebras@gmail.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=a92e38603902b22c5b20fecefa5da3d2a233516c">a92e38603902b22c5b20fecefa5da3d2a233516c</a> +<blockquote> +<p> + jbig2dec: Only print repeated error/warning messages once.<br> +<br> +base/sjbig2.c<br> +base/sjbig2.h<br> +jbig2dec/jbig2dec.c<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-14 14:28:48 +0000 +</strong> +<br>Ken Sharp <ken.sharp@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=3bb28e08002ef4a90bddb05aa6cd06a256153663">3bb28e08002ef4a90bddb05aa6cd06a256153663</a> +<blockquote> +<p> + PS interpreter - Throw error from exp when base is 0 and -ve exponent<br> +<br> + Bug #700181 "using exp with 0 as base"<br> +<br> + If base is 0, and exp is negative, then the result of exp is undefined<br> + we should throw an error instead of pushing #INF.0 on the stack.<br> +<br> +psi/zmath.c<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-14 09:50:08 +0000 +</strong> +<br>Chris Liddell <chris.liddell@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=35766ceb3b28aad95bd63655b1d621a82d3a5b06">35766ceb3b28aad95bd63655b1d621a82d3a5b06</a> +<blockquote> +<p> + Bug 700176: check the *output* device for LockSafetyParams<br> +<br> + When calling .setdevice we were checking if LockSafetyParams was set, and if so<br> + throwing an invalidaccess error.<br> +<br> + The problem is, if another device, for example the pdf14 compositor is the 'top'<br> + device, that does not (and cannot) honour LockSafetyParams.<br> +<br> + To solve this, we'll now use the (relatively new) gxdso_current_output_device<br> + spec_op to retrieve the *actual* output device, and check the LockSafetyParams<br> + flag in that.<br> +<br> +psi/zdevice.c<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-14 09:31:10 +0000 +</strong> +<br>Ken Sharp <ken.sharp@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=548bb434e81dadcc9f71adf891a3ef5bea8e2b4e">548bb434e81dadcc9f71adf891a3ef5bea8e2b4e</a> +<blockquote> +<p> + PS interpreter - add some type checking<br> +<br> + These were 'probably' safe anyway, since they mostly treat the objects<br> + as integers without checking, which at least can't result in a crash.<br> +<br> + Nevertheless, we ought to check.<br> +<br> + The return from comparedictkeys could be wrong if one of the keys had<br> + a value which was not an array, it could incorrectly decide the two<br> + were in fact the same.<br> +<br> +psi/zbfont.c<br> +psi/zcolor.c<br> +psi/zcrd.c<br> +psi/zfjpx.c<br> +psi/zfont.c<br> +psi/zfont0.c<br> +psi/zimage3.c<br> +psi/ztrans.c<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-14 09:27:00 +0000 +</strong> +<br>Ken Sharp <ken.sharp@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=ef252e7dc214bcbd9a2539216aab9202848602bb">ef252e7dc214bcbd9a2539216aab9202848602bb</a> +<blockquote> +<p> + Bug #700168 - add a type check<br> +<br> + Bug #700168 "Type confusion in JBIG2Decode"<br> +<br> + The code was assuming that .jbig2globalctx was a structure allocated<br> + by the graphics library, without checking.<br> +<br> + Add a check to see that it is a structure and that its the correct<br> + type of structure.<br> +<br> +psi/zfjbig2.c<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-14 09:25:13 +0000 +</strong> +<br>Ken Sharp <ken.sharp@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=67d760ab775dae4efe803b5944b0439aa3c0b04a">67d760ab775dae4efe803b5944b0439aa3c0b04a</a> +<blockquote> +<p> + Bug #700169 - unchecked type<br> +<br> + Bug #700169 "Type confusion in setcolorspace"<br> +<br> + In seticc() we extract "Name" from a dictionary, if it succeeds we then<br> + use it as a string, without checking the type to see if it is in fact<br> + a string.<br> +<br> + Add a check on the type, and add a couple to check that 'N' is an integer<br> + in a few places too.<br> +<br> +psi/zicc.c<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-12 17:21:33 +0000 +</strong> +<br>Chris Liddell <chris.liddell@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=3005fcb9bb160af199e761e03bc70a9f249a987e">3005fcb9bb160af199e761e03bc70a9f249a987e</a> +<blockquote> +<p> + Bug 700153: restore: always check available stack<br> +<br> + Previously, we were checking there was enough stack space available when the<br> + restore operation required a device change, but since we have to use<br> + Postscript to reset the userparams (ick!), we need the stack check even when<br> + not changing the device.<br> +<br> +psi/zdevice2.c<br> +<p> +</blockquote> +<hr> +<p><strong>2018-11-07 12:22:59 +0000 +</strong> +<br>Chris Liddell <chris.liddell@artifex.com><br> +<a href="http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=2f99c138cf60d75621eb03ae924453b968274694">2f99c138cf60d75621eb03ae924453b968274694</a> +<blockquote> +<p> + Contrib devices: Check for error return opening output file<br> +<br> + 09-59.PS cycles through every available device, attempting to open each one.<br> +<br> + For many devices this results in an invalid configuration (mainly a lack of<br> + output file).<br> +<br> + These devices, on being shutdown, ignored the lack of output file, and attempted<br> + to write their final bytes out anyway (attempting to write data to a null<br> + FILE * pointer), causing a segfault.<br> +<br> + We now check the return value of gdev_prn_open_printer() and only write those<br> + final bytes if gdev_prn_open_printer() completed successfully.<br> +<br> +contrib/japanese/gdevespg.c<br> +contrib/japanese/gdevnpdl.c<br> +contrib/lips4/gdevl4r.c<br> +<p> +</blockquote> +<hr> <p><strong>2018-11-07 16:03:59 +0000 </strong> <br>Chris Liddell <chris.liddell@artifex.com><br> @@ -193370,7 +193791,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Install.htm b/doc/Install.htm index ba483df0a..db1f75d3d 100644 --- a/doc/Install.htm +++ b/doc/Install.htm @@ -440,7 +440,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Language.htm b/doc/Language.htm index d417e453e..be5f898ec 100644 --- a/doc/Language.htm +++ b/doc/Language.htm @@ -1905,7 +1905,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Lib.htm b/doc/Lib.htm index a92505d46..231363a75 100644 --- a/doc/Lib.htm +++ b/doc/Lib.htm @@ -1047,7 +1047,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Make.htm b/doc/Make.htm index db3bf6c4a..cc1853145 100644 --- a/doc/Make.htm +++ b/doc/Make.htm @@ -1510,7 +1510,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/News.htm b/doc/News.htm index d966e287e..a69fb22bc 100644 --- a/doc/News.htm +++ b/doc/News.htm @@ -96,15 +96,10 @@ overview</a>. <!-- [2.0 begin contents] ================================================== --> -<h2><a name="Version9.25"></a>Version 9.26 (2018-11-07)</h2> +<h2><a name="Version9.25"></a>Version 9.26 (2018-11-20)</h2> <p> Highlights in this release include: <ul> <li> -<p>This release fixes problems with argument handling, some unintended results of -the security fixes to the SAFER file access restrictions (specifically accessing -ICC profile files), and some additional security issues over the recent 9.24 release. -</li> -<li> <p>Security issues have been the primary focus of this release, including solving several (well publicised) real and potential exploits. <br> @@ -112,10 +107,6 @@ several (well publicised) real and potential exploits. release to avoid these issues.</u></big> </li> <li> -<p>As well as Ghostscript itself, jbig2dec has had a significant amount of work improving -its robustness in the face of out specification files. -</li> -<li> <p>IMPORTANT: We are in the process of forking LittleCMS. LCMS2 is not thread safe, and cannot be made thread safe without breaking the ABI. Our fork will be thread safe, and include performance enhancements (these changes have all be been offered and rejected upstream). We @@ -123,12 +114,16 @@ will maintain compatibility between Ghostscript and LCMS2 for a time, but not in Our fork will be available as its own package separately from Ghostscript (and MuPDF). </li> <li> +<p>Thanks to Man Yue Mo of Semmle Security Research Team, Jens Müller of +Ruhr-Universität Bochum and Tavis Ormandy of Google's Project Zero for their help to +identify specific security issues. +</li> +<li> <p>The usual round of bug fixes, compatibility changes, and incremental improvements. </li> </ul> <p>For a list of open issues, or to report problems, please visit <a href="http://bugs.ghostscript.com/">bugs.ghostscript.com</a>. - <h3><a name="9.26_Incompatible_changes"></a>Incompatible changes</h3> <ul> <li> @@ -160,7 +155,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Ps-style.htm b/doc/Ps-style.htm index 512bb2054..dd7b19bf2 100644 --- a/doc/Ps-style.htm +++ b/doc/Ps-style.htm @@ -549,7 +549,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Ps2epsi.htm b/doc/Ps2epsi.htm index dfea437e3..a2ef849d8 100644 --- a/doc/Ps2epsi.htm +++ b/doc/Ps2epsi.htm @@ -229,7 +229,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Psfiles.htm b/doc/Psfiles.htm index 0d9fbd412..9453d1bd7 100644 --- a/doc/Psfiles.htm +++ b/doc/Psfiles.htm @@ -900,7 +900,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Readme.htm b/doc/Readme.htm index 66704192b..500c5f25a 100644 --- a/doc/Readme.htm +++ b/doc/Readme.htm @@ -572,7 +572,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Release.htm b/doc/Release.htm index a9face5d6..f438068cc 100644 --- a/doc/Release.htm +++ b/doc/Release.htm @@ -845,7 +845,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/SavedPages.htm b/doc/SavedPages.htm index 2ff42b98c..47a315a9c 100644 --- a/doc/SavedPages.htm +++ b/doc/SavedPages.htm @@ -316,7 +316,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Source.htm b/doc/Source.htm index 05bb31bb4..04afcfd89 100644 --- a/doc/Source.htm +++ b/doc/Source.htm @@ -465,7 +465,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Unix-lpr.htm b/doc/Unix-lpr.htm index 367759586..f815b92e3 100644 --- a/doc/Unix-lpr.htm +++ b/doc/Unix-lpr.htm @@ -304,7 +304,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/Use.htm b/doc/Use.htm index 7573ad681..8895c7452 100644 --- a/doc/Use.htm +++ b/doc/Use.htm @@ -5126,7 +5126,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/VectorDevices.htm b/doc/VectorDevices.htm index 7cf378a04..de0f07e66 100644 --- a/doc/VectorDevices.htm +++ b/doc/VectorDevices.htm @@ -1395,7 +1395,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/WhatIsGS.htm b/doc/WhatIsGS.htm index 25b438b80..e97fd9223 100644 --- a/doc/WhatIsGS.htm +++ b/doc/WhatIsGS.htm @@ -189,7 +189,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/gs-vms.hlp b/doc/gs-vms.hlp index 89179aedb..c06e1cf35 100644 --- a/doc/gs-vms.hlp +++ b/doc/gs-vms.hlp @@ -1,6 +1,6 @@ 1 gs gs - GPL Ghostscript interpreter/previewer -! Ghostscript version 9.26, 7 November 2018 +! Ghostscript version 9.26, 20 November 2018 Usage: $ gs [options] [file ...] diff --git a/doc/sample_downscale_device.htm b/doc/sample_downscale_device.htm index 71c09ae1d..1e1a099c4 100644 --- a/doc/sample_downscale_device.htm +++ b/doc/sample_downscale_device.htm @@ -263,7 +263,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> <!--FINISH EDITING HERE--> diff --git a/doc/subclass.htm b/doc/subclass.htm index 5ac7ca18b..7b3eace6c 100644 --- a/doc/subclass.htm +++ b/doc/subclass.htm @@ -812,7 +812,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/doc/thirdparty.htm b/doc/thirdparty.htm index c384d4ca4..093d7ff09 100644 --- a/doc/thirdparty.htm +++ b/doc/thirdparty.htm @@ -268,7 +268,7 @@ or contact Artifex Software, Inc., 1305 Grant Avenue - Suite 200, Novato, CA 94945, U.S.A., +1(415)492-9861, for further information. <p> -<small>Ghostscript version 9.26, 7 November 2018 +<small>Ghostscript version 9.26, 20 November 2018 <!-- [3.0 end visible trailer] ============================================= --> diff --git a/man/dvipdf.1 b/man/dvipdf.1 index b2352949f..d16452526 100644 --- a/man/dvipdf.1 +++ b/man/dvipdf.1 @@ -1,4 +1,4 @@ -.TH DVIPDF 1 "7 November 2018" 9.26 Ghostscript \" -*- nroff -*- +.TH DVIPDF 1 "20 November 2018" 9.26 Ghostscript \" -*- nroff -*- .SH NAME dvipdf \- Convert TeX DVI file to PDF using ghostscript and dvips .SH SYNOPSIS @@ -1,4 +1,4 @@ -.TH GS 1 "7 November 2018" 9.26 Ghostscript \" -*- nroff -*- +.TH GS 1 "20 November 2018" 9.26 Ghostscript \" -*- nroff -*- .SH NAME gs \- Ghostscript (PostScript and PDF language interpreter and previewer) .SH SYNOPSIS diff --git a/man/gslp.1 b/man/gslp.1 index bccb4ccf8..7225b988b 100644 --- a/man/gslp.1 +++ b/man/gslp.1 @@ -1,4 +1,4 @@ -.TH GSLP 1 "7 November 2018" 9.26 Ghostscript \" -*- nroff -*- +.TH GSLP 1 "20 November 2018" 9.26 Ghostscript \" -*- nroff -*- .SH NAME gslp \- Format and print text using ghostscript .br diff --git a/man/gsnd.1 b/man/gsnd.1 index 5600e6f10..ec386ab61 100644 --- a/man/gsnd.1 +++ b/man/gsnd.1 @@ -1,4 +1,4 @@ -.TH GSND 1 "7 November 2018" 9.26 Ghostscript \" -*- nroff -*- +.TH GSND 1 "20 November 2018" 9.26 Ghostscript \" -*- nroff -*- .SH NAME gsnd \- Run ghostscript (PostScript and PDF engine) without display .SH SYNOPSIS diff --git a/man/pdf2dsc.1 b/man/pdf2dsc.1 index ddebb733c..f5f2c3ee0 100644 --- a/man/pdf2dsc.1 +++ b/man/pdf2dsc.1 @@ -1,4 +1,4 @@ -.TH PDF2DSC 1 "7 November 2018" 9.26 "Ghostscript Tools" \" -*- nroff -*- +.TH PDF2DSC 1 "20 November 2018" 9.26 "Ghostscript Tools" \" -*- nroff -*- .SH NAME pdf2dsc \- generate a PostScript page list of a PDF document .SH SYNOPSIS diff --git a/man/pdf2ps.1 b/man/pdf2ps.1 index 7037f4398..10f4930bb 100644 --- a/man/pdf2ps.1 +++ b/man/pdf2ps.1 @@ -1,4 +1,4 @@ -.TH PDF2PS 1 "7 November 2018" 9.26 "Ghostscript Tools" \" -*- nroff -*- +.TH PDF2PS 1 "20 November 2018" 9.26 "Ghostscript Tools" \" -*- nroff -*- .SH NAME pdf2ps \- Ghostscript PDF to PostScript translator .SH SYNOPSIS diff --git a/man/pf2afm.1 b/man/pf2afm.1 index 98103bcf4..255a1c662 100644 --- a/man/pf2afm.1 +++ b/man/pf2afm.1 @@ -1,4 +1,4 @@ -.TH PF2AFM 1 "7 November 2018" 9.26 Ghostscript \" -*- nroff -*- +.TH PF2AFM 1 "20 November 2018" 9.26 Ghostscript \" -*- nroff -*- .SH NAME pf2afm \- Make an AFM file from Postscript (PFB/PFA/PFM) font files using ghostscript .SH SYNOPSIS diff --git a/man/pfbtopfa.1 b/man/pfbtopfa.1 index 2cda5ec9d..7e5d70df5 100644 --- a/man/pfbtopfa.1 +++ b/man/pfbtopfa.1 @@ -1,4 +1,4 @@ -.TH PFBTOPFA 1 "7 November 2018" 9.26 Ghostscript \" -*- nroff -*- +.TH PFBTOPFA 1 "20 November 2018" 9.26 Ghostscript \" -*- nroff -*- .SH NAME pfbtopfa \- Convert Postscript .pfb fonts to .pfa format using ghostscript .SH SYNOPSIS diff --git a/man/printafm.1 b/man/printafm.1 index 9784475ce..f8cb1651c 100644 --- a/man/printafm.1 +++ b/man/printafm.1 @@ -1,4 +1,4 @@ -.TH PRINTAFM 1 "7 November 2018" 9.26 Ghostscript \" -*- nroff -*- +.TH PRINTAFM 1 "20 November 2018" 9.26 Ghostscript \" -*- nroff -*- .SH NAME printafm \- Print the metrics from a Postscript font in AFM format using ghostscript .SH SYNOPSIS diff --git a/man/ps2ascii.1 b/man/ps2ascii.1 index c1092ae70..12cfc090f 100644 --- a/man/ps2ascii.1 +++ b/man/ps2ascii.1 @@ -1,4 +1,4 @@ -.TH PS2ASCII 1 "7 November 2018" 9.26 "Ghostscript Tools" \" -*- nroff -*- +.TH PS2ASCII 1 "20 November 2018" 9.26 "Ghostscript Tools" \" -*- nroff -*- .SH NAME ps2ascii \- Ghostscript translator from PostScript or PDF to ASCII .SH SYNOPSIS diff --git a/man/ps2epsi.1 b/man/ps2epsi.1 index 1e7c13ada..1b8045baa 100644 --- a/man/ps2epsi.1 +++ b/man/ps2epsi.1 @@ -1,4 +1,4 @@ -.TH PS2EPSI 1 "7 November 2018" 9.26 "Ghostscript Tools" \" -*- nroff -*- +.TH PS2EPSI 1 "20 November 2018" 9.26 "Ghostscript Tools" \" -*- nroff -*- .SH NAME ps2epsi \- generate conforming Encapsulated PostScript .SH SYNOPSIS diff --git a/man/ps2pdf.1 b/man/ps2pdf.1 index 2659b51ef..159e93d19 100644 --- a/man/ps2pdf.1 +++ b/man/ps2pdf.1 @@ -1,4 +1,4 @@ -.TH PS2PDF 1 "7 November 2018" 9.26 Ghostscript \" -*- nroff -*- +.TH PS2PDF 1 "20 November 2018" 9.26 Ghostscript \" -*- nroff -*- .SH NAME ps2pdf \- Convert PostScript to PDF using ghostscript .br diff --git a/man/ps2pdfwr.1 b/man/ps2pdfwr.1 index 235504dfb..94f9433f3 100644 --- a/man/ps2pdfwr.1 +++ b/man/ps2pdfwr.1 @@ -1,4 +1,4 @@ -.TH PS2PDFWR 1 "7 November 2018" 9.26 Ghostscript \" -*- nroff -*- +.TH PS2PDFWR 1 "20 November 2018" 9.26 Ghostscript \" -*- nroff -*- .SH NAME ps2pdfwr \- Convert PostScript to PDF without specifying CompatibilityLevel, using ghostscript .SH SYNOPSIS diff --git a/man/ps2ps.1 b/man/ps2ps.1 index 157f6c7d6..b60b57701 100644 --- a/man/ps2ps.1 +++ b/man/ps2ps.1 @@ -1,4 +1,4 @@ -.TH PS2PS 1 "7 November 2018" 9.26 "Ghostscript Tools" \" -*- nroff -*- +.TH PS2PS 1 "20 November 2018" 9.26 "Ghostscript Tools" \" -*- nroff -*- .SH NAME ps2ps, eps2eps \- Ghostscript PostScript "distiller" .SH SYNOPSIS |