Overview

Request 1096685 accepted

Security fix CVE-2023-36664 bsc#1212711 for ghostscript and ghostscript-mini (forwarded request 1096684 from jsmeix)

Loading...

Marcus Rueckert's avatar

mrueckert wrote (1096685) This seems to lose changes


Johannes Meixner's avatar
author source maintainer

No changes entry is lost (as far as I see).

I only reformatted the changes entry dated "Mon Jul 18 07:28:54 UTC 2022" to have its lines not longer than 68 characters.

Additionally I added some more information that belongs to this changes entry about the possible Tesseract OCR support in Ghostscript which was never built for openSUSE because 'configure' automatically disabled Tesseract OCR support in Ghostscript because currently there is no C++ compiler in the Ghostscript build system.

Therefore that changes entry which talked about Tesseract OCR support in Ghostscript was wrong (or at least misleading) because we never built it which is why I enhanced that changes entry by the following two parts:

"Mainly due to time constraints, we only support including Tesseract from source included in our release packages, and not linking to Tesseract/Leptonica shared libraries. Whether we add this capability will be largely dependent on community demand for the feature. See Enabling OCR at https://www.ghostscript.com/ocr.html for more details."

and

"Configure --without-tesseract because this requires C++ (it might be added if Tesseract support in Ghostscript is needed)."

plus in ghostscript.spec

"%configure ... --without-tesseract"

to make it clear and obvious that (at least currently) Ghostscript is built without Tesseract OCR support.

FYI regarding "why not 'just build' Ghostscript with Tesseract OCR support":

As long as this is not really needed (business case) I do not want to have any more piece of foreign source code (here "Tesseract from source included in our release packages") in Ghostscript because each piece of foreign source code in a package is a maintenance burden: Assume there is a severe (security) bug in Tesseract then we have its sources duplicated (in possible different versions) so we have duplicated maintenance efforts and the maintenance team must somehow know (and maintain) that we have duplicated sources.


Johannes Meixner's avatar
author source maintainer

Furthermore I cleaned up another meanwhile obsolete 'configure' setting:

I removed 'configure ... --without-luratech' because with it 'configure' shows:

"configure: WARNING: unrecognized options: ... --without-luratech ..."

Request History
Johannes Meixner's avatar

jsmeix created request

Security fix CVE-2023-36664 bsc#1212711 for ghostscript and ghostscript-mini (forwarded request 1096684 from jsmeix)


Ana Guerrero's avatar

anag+factory set openSUSE:Factory:Staging:C as a staging project

Being evaluated by staging project "openSUSE:Factory:Staging:C"


Ana Guerrero's avatar

anag+factory accepted review

Picked "openSUSE:Factory:Staging:C"


Factory Auto's avatar

factory-auto added opensuse-review-team as a reviewer

Please review sources


Factory Auto's avatar

factory-auto accepted review

Check script succeeded


Saul Goodman's avatar

licensedigger accepted review

ok


Dominique Leuenberger's avatar

dimstar accepted review


Dominique Leuenberger's avatar

dimstar_suse accepted review

Staging Project openSUSE:Factory:Staging:C got accepted.


Dominique Leuenberger's avatar

dimstar_suse approved review

Staging Project openSUSE:Factory:Staging:C got accepted.


Dominique Leuenberger's avatar

dimstar_suse accepted request

Staging Project openSUSE:Factory:Staging:C got accepted.

openSUSE Build Service is sponsored by