From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: Switching to Artifex Ghostscript Date: Mon, 29 May 2017 16:47:40 -0400 Message-ID: <20170529204740.GC15019@jasmine> References: <20170520205523.GA27152@jasmine> <87k25b5h5d.fsf@fastmail.com> <87vaougxzy.fsf@elephly.net> <87inkr8fui.fsf@gnu.org> <20170529175013.GA13897@jasmine> <874lw3ik3h.fsf@elephly.net> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="XMCwj5IQnwKtuyBG" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:53510) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dFRZs-0000GM-W3 for guix-devel@gnu.org; Mon, 29 May 2017 16:47:49 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dFRZo-0004Jm-3N for guix-devel@gnu.org; Mon, 29 May 2017 16:47:49 -0400 Content-Disposition: inline In-Reply-To: <874lw3ik3h.fsf@elephly.net> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ricardo Wurmus Cc: guix-devel@gnu.org --XMCwj5IQnwKtuyBG Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, May 29, 2017 at 08:38:58PM +0200, Ricardo Wurmus wrote: >=20 > Leo Famulari writes: >=20 > > Here are patches that allow you build groff, cairo, and cups with the > > Artifex Ghostscript. >=20 > Woo! I'm not sure what I was thinking... I forgot to actually make groff, cairo, and cups use this artifex-ghostscript :p Testing now... > > + (patches (search-patches "artifex-ghostscript-runpath.patch" > > + ;; TODO: > > + ;;"ghostscript-CVE-2017-8291.patch" > > + )) >=20 > What=E2=80=99s up with this? Is the latest release of Artifex Ghostscript > vulnerable? Yes, it's vulnerable. I saw this fixed in the Arch Linux package, but I didn't check yet if there are other important bugs to fix in Ghostscript 9.21. > Couldn=E2=80=99t we just add =E2=80=9C#:make-flags '("so")=E2=80=9D and a= void replacing the > build phase? I'll try this. --XMCwj5IQnwKtuyBG Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlksiOwACgkQJkb6MLrK fwhDUw/+Lksdx8T5rn61CMSHQ9fAlp+0YydyAznMj4w9jTbuMKSRqQyyLQuIA25S SHrWfXoUAmOpdl/N5TzrxgFKmTx7qvIskKrH0Q+sxA7C+0RRfZVK8bDywiPlAn0l a/bMS5OM8hFUN+ldVGC6XPunVkDsm955K+9rn70JAB5jkUub/j+nULeIdwVa97kg xIJEimu3wWikhZt+3/pf8TJ+gqfTeHxOxTNYutJP6jPMuimDqecoCkiOFKsdC/8e K2oLXV8mMogBCq/fofrYO+lxPWBWGfvzXiXV+/hFJZo9Tk5FAb3lZ3Ps1VDuenNZ aSGhr3H00WmN7NtWpLZrBmyBx/FNBBsOICKyj923S/L0grPY2y+TKsTmbI7C/2CN V2F/iDPZUmgEDgiOHt/R+0NsX9EeFD3JYf3xasMDIIV6ihYLmqKp3dKbBHKGVj42 ARIa+b3AR4ws0JRfE4Ja5GdIaXfo3deBwg0yW5Hu3pY3MR7xuYCKE+TP4ZzLJ0fX HNk01oerHuuNScuRKsRXohlkG94g4ctnO1kEuZrW9KRlczOantQyDB+2Rq3WD0OY y7YGqXA5yFUdX3uU41u/xwMpPfwGdgixVHO1wcbnJCeleXtm2c7Y5fmZBGk48nT3 KD0NlQfNIPkHQy+Z4OwEnp2JzGuuWouoXgoh01m1nu7+1AfGWJg= =Jrfi -----END PGP SIGNATURE----- --XMCwj5IQnwKtuyBG--