From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id oFeSOX+0F2cohgEAe85BDQ:P1 (envelope-from ) for ; Tue, 22 Oct 2024 14:19:44 +0000 Received: from aspmx1.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2.migadu.com with LMTPS id oFeSOX+0F2cohgEAe85BDQ (envelope-from ) for ; Tue, 22 Oct 2024 16:19:44 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=jQBYqyOM; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=CYUl60LF; dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1729606782; a=rsa-sha256; cv=none; b=IDpx7GGsV2IbyvMR6YFlp7A7lCPS/JwNcxbId3gOuIYJA4I7ShER7VFzcZMja79SSkYG0I EJ8zpzMt/ozWUawGUFUKOI+f+RtiMtLiDrknK3XpDPqP0ZxUrF0t+4m7q+5cfwQlTIERZY 5FbFE9vgt+DI7hWw8WZ+GHnbfAJ968t1orhudOrnsybZ4wBMKrlu2iitj/0e8a8hln1qG2 AGSert923c+bVAR2kAH42rjlQ3BTV9dmKKIPbPNSf3q86TrtLD4LRKmzehkMrizRDiJq3Y M7PWZJ+TudqT4+tQCkt2UhqUWjhiBq9muA53aAMLTn5zDjkqJdn85B4JPdd9jA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=jQBYqyOM; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=CYUl60LF; dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1729606782; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=1bVRptzm+QQNXNBC++W8VEHR4gCy8p+nlhT/WnwUkMk=; b=OGPwFg+PrP5N1xhUqxZfgQFMnQRBbZt5uh0gBGYKNY7z5LWT5CY+ZkEKs1NvQtciobC8/0 9pBbBxz6iTuXlurRjuMosAI8Gt83XC6RomxSuhAip18FKxk46/zZbxyZ8zMWFIWDZ807DX 6e+N9DPomFstGf+m1KzqmENudat06sw6bqz4Z6RKAmWTeyfbh7ky/BSCGkzUgxKA7ENiaG yyMLu2Pkj+k8T2LpVrbUlD2F7r6BbQYI433UnRsFkq45UheRSRBhuA2lyMWg48YerHTIDm TEgk45VqlDJuK1wgwBjoP0rNZn2l9GoeWky48UesjGEdC/gsLFONbDkGUqXVdQ== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id CAF7A1EC98 for ; Tue, 22 Oct 2024 16:19:42 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t3FjU-0005wL-Vh; Tue, 22 Oct 2024 10:19:37 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t3FjT-0005wB-Hr for guix-patches@gnu.org; Tue, 22 Oct 2024 10:19:35 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t3FjT-0005NH-8u for guix-patches@gnu.org; Tue, 22 Oct 2024 10:19:35 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:Date:References:In-Reply-To:From:To:Subject; bh=1bVRptzm+QQNXNBC++W8VEHR4gCy8p+nlhT/WnwUkMk=; b=jQBYqyOMwIG8tVD9iUSvEEwh5EknJ3NLUOO12qRyImO75Xd9buj+lE9VtpfNmGE2+l75uSMeuC71IvSJoPKY28IX8zxLgUVsYD9vEMOsp5493PUN1GflefGjlf/fflZufPs+4Op6mL8uECq+W1Ur46tRf6Aw/1BZw52sfzXrDY4v9wd8SZ4sbR/9TRrngYLlvCzdTipMan7IEQ5Ll1rcFJ5DJFYifiF59mTdcgfDoaS96buzrQ6+VE9b/ROLjUrlLRMMT7bg5HHhR+uNf1sHzmmKpnNFmRcWQQx239qXLXGahiMmvv9yppPUj7Sfy0fGhOhpjdoOcnWhITR5k9V4xw==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t3Fju-0005r3-Bu for guix-patches@gnu.org; Tue, 22 Oct 2024 10:20:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#39674] [PATCH] enable PostScript backend in Evince Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 22 Oct 2024 14:20:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 39674 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: guix-security@gnu.org, 39674@debbugs.gnu.org, raingloom , =?UTF-8?Q?Nicol=C3=B2?= Balzarotti Received: via spool by 39674-submit@debbugs.gnu.org id=B39674.172960677422458 (code B ref 39674); Tue, 22 Oct 2024 14:20:02 +0000 Received: (at 39674) by debbugs.gnu.org; 22 Oct 2024 14:19:34 +0000 Received: from localhost ([127.0.0.1]:56821 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t3FjS-0005q8-5a for submit@debbugs.gnu.org; Tue, 22 Oct 2024 10:19:34 -0400 Received: from mail-pj1-f43.google.com ([209.85.216.43]:44434) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t3FjO-0005ps-Lh for 39674@debbugs.gnu.org; Tue, 22 Oct 2024 10:19:33 -0400 Received: by mail-pj1-f43.google.com with SMTP id 98e67ed59e1d1-2e2dcf4b153so4153335a91.1 for <39674@debbugs.gnu.org>; Tue, 22 Oct 2024 07:19:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1729606677; x=1730211477; darn=debbugs.gnu.org; h=content-transfer-encoding:mime-version:user-agent:message-id:date :references:in-reply-to:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=1bVRptzm+QQNXNBC++W8VEHR4gCy8p+nlhT/WnwUkMk=; b=CYUl60LFCP04qyt0XGMRLd0DxjcYJMkrjX9W0qTF+ujP1037soawiEd9lAdWLtmt17 fNpZ1/wb/8xNz8SyA2ss5w2kNVfVc8QagXywP6Mcqztr7+HTv5SI+4TcRZByM1qSgd1+ U363sOPGqGC44Masr8m+Gj6Dv91qUeWEP1qmAwmcXUfPKt7CozjQcWzSP+4ZpFV0Rt6C jKWnKMq8aSMP1G0gWnaUYKNuJiCuWyV8whAqc23gVRDyKWYItukJPb20GHQ4sqrAXTP2 VAenH9XyIFg0bOK4zUqfGgsI2XrHXraMVUdk7DJIDG68o1f+vcDcVa9qDhAKFLZU5MM/ bXLw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1729606677; x=1730211477; h=content-transfer-encoding:mime-version:user-agent:message-id:date :references:in-reply-to:subject:cc:to:from:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=1bVRptzm+QQNXNBC++W8VEHR4gCy8p+nlhT/WnwUkMk=; b=A2DWWQLIHwlDkNb2E/SiEnVCv/2oh+3CoIbXzao59u/GjrmxOVlllZlxDkFFo/PX+c QsoLZT/jcmOzI4/Lm0tryX9jjniFyTuis34khS1bSxeU02l/VU/SwPTWgIAJTXTcXOfi d7NCq1kwoVoSQcjtWZ2e7eeFMTHyxRUrtgPO8F7FQm8kvv1WbwoFuQsd8AZDAvvYuNeP udq+74YdqIqLr2nR8onh3YUR6TD8vbCApHqjizLJsA0rCyEvZpamOM8wEO1pYeXOHpCQ DwGmh/4k8QsF+vc5CR4q/vJOp4iivL7V8/dF4WVXnLFxPoCSPiBc3p7K7Q/8h9Og4Rmf Gu3g== X-Forwarded-Encrypted: i=1; AJvYcCURChT+hC3ppJMpZkAXLb9N2cY7XJ696nXYIpx5f0eF97SeYWbRJB2H8CaxFgWtSO1/ZnBNzA==@debbugs.gnu.org X-Gm-Message-State: AOJu0YwSw0I8hiEX7n26RmZCFXYsTwAl60uA/vQpUNj9gcVaQswekvM0 ZfYiICep5i4IjvZSbR3Dq3DoYbwRlp/sUAXnbT8seL4Lsp2yQUYZ X-Google-Smtp-Source: AGHT+IGzMkAE+moJpBZ3BPtnSpW9EMdQuyZoj/q4cRcVP9DbjFxGjroOgu9wzEGcvs/Crnjk3QXFwg== X-Received: by 2002:a17:90b:108:b0:2e1:d5c9:1bc4 with SMTP id 98e67ed59e1d1-2e5da552612mr3932924a91.7.1729606676941; Tue, 22 Oct 2024 07:17:56 -0700 (PDT) Received: from terra ([2405:6586:be0:0:c8ff:1707:9b9:af89]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2e5ad25c33asm6272497a91.2.2024.10.22.07.17.54 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 22 Oct 2024 07:17:56 -0700 (PDT) From: Maxim Cournoyer In-Reply-To: <87imj29e15.fsf@gnu.org> ("Ludovic =?UTF-8?Q?Court=C3=A8s?="'s message of "Wed, 18 Mar 2020 11:02:30 +0100") References: <1582114083.2225.0@riseup.net> <87o8tubw3l.fsf@guixSD.i-did-not-set--mail-host-address--so-tickle-me> <87imj29e15.fsf@gnu.org> Date: Tue, 22 Oct 2024 23:17:50 +0900 Message-ID: <87o73c1asx.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Spam-Score: -1.63 X-Spam-Score: -1.63 X-Migadu-Queue-Id: CAF7A1EC98 X-Migadu-Scanner: mx12.migadu.com X-TUID: i5HvV8DiAlJr Hi, Ludovic Court=C3=A8s writes: > Hi Nicol=C3=B2 & raingloom! > > (+ Cc: guix-security) > > Nicol=C3=B2 Balzarotti skribis: > >> Thanks! >> >> I was wondering why it could not open .eps files! I tested the patch, >> applies, build and now I can open them. guix size reports +3% >> (1009.6 -> 1038.0). >> >> +1 for merging > > I think PostScript support is often disabled by default because of > security issues: PostScript is a very versatile language and Ghostscript > has had a series of problems due to its inability to =E2=80=9Csandbox=E2= =80=9D > PostScript code. > > A particularly important issue is thumbnail generation: you could find > yourself running PostScript code without explicitly opening a file. > > FWIW, I resort to gv (or ps2pdf) when I need to open a PostScript that I > deem trustworthy. My opinion is that we should enable it. It's advertised as a supported format [0]; if there was a serious security issue upstream would probably drop support for it, or at least hide it behind some configuration warning, and not advertize it. Debian, known for its security track record, also has it enabled [1]. [0] https://help.gnome.org/users/evince/stable/formats.html.en [1] https://salsa.debian.org/gnome-team/evince/-/blob/debian/latest/debian= /rules?ref_type=3Dheads#L15 --=20 Thanks, Maxim