{"id":2224374,"url":"http://patchwork.ozlabs.org/api/1.2/patches/2224374/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/patch/20260417105529.4147375-2-bernd@kuhls.net/","project":{"id":27,"url":"http://patchwork.ozlabs.org/api/1.2/projects/27/?format=json","name":"Buildroot development","link_name":"buildroot","list_id":"buildroot.buildroot.org","list_email":"buildroot@buildroot.org","web_url":"","scm_url":"","webscm_url":"","list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260417105529.4147375-2-bernd@kuhls.net>","list_archive_url":null,"date":"2026-04-17T10:55:29","name":"[2/2] package/ghostscript: security bump to version 10.07.0","commit_ref":null,"pull_url":null,"state":"accepted","archived":false,"hash":"56c6c4a2279a94c4bd91bd779a5b0e2485527f4a","submitter":{"id":86624,"url":"http://patchwork.ozlabs.org/api/1.2/people/86624/?format=json","name":"Bernd Kuhls","email":"bernd@kuhls.net"},"delegate":{"id":89618,"url":"http://patchwork.ozlabs.org/api/1.2/users/89618/?format=json","username":"juju","first_name":"Julien","last_name":"Olivain","email":"juju@cotds.org"},"mbox":"http://patchwork.ozlabs.org/project/buildroot/patch/20260417105529.4147375-2-bernd@kuhls.net/mbox/","series":[{"id":500309,"url":"http://patchwork.ozlabs.org/api/1.2/series/500309/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/list/?series=500309","date":"2026-04-17T10:55:28","name":"[1/2] package/ghostscript: Fix brotli build failure on ARMv7","version":1,"mbox":"http://patchwork.ozlabs.org/series/500309/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2224374/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2224374/checks/","tags":{},"related":[],"headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=G9vXMv3q;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::137; helo=smtp4.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fxsHW3SlLz1yD3\n\tfor ;\n Fri, 17 Apr 2026 20:55:51 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id D5E57409D5;\n\tFri, 17 Apr 2026 10:55:49 +0000 (UTC)","from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id IWchjmqBYj5K; Fri, 17 Apr 2026 10:55:49 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id D799040C3E;\n\tFri, 17 Apr 2026 10:55:48 +0000 (UTC)","from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])\n by lists1.osuosl.org (Postfix) with ESMTP id A6627270\n for ; Fri, 17 Apr 2026 10:55:47 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp4.osuosl.org (Postfix) with ESMTP id 8CD1340C3E\n for ; Fri, 17 Apr 2026 10:55:47 +0000 (UTC)","from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id xDb3kqMWLOxj for ;\n Fri, 17 Apr 2026 10:55:46 +0000 (UTC)","from dd20012.kasserver.com (dd20012.kasserver.com [85.13.140.57])\n by smtp4.osuosl.org (Postfix) with ESMTPS id 21028409D5\n for ; Fri, 17 Apr 2026 10:55:45 +0000 (UTC)","from fli4l.lan.fli4l (p54a1bf30.dip0.t-ipconnect.de [84.161.191.48])\n by dd20012.kasserver.com (Postfix) with ESMTPSA id A48B3A4C370A\n for ; Fri, 17 Apr 2026 12:55:29 +0200 (CEST)","from bruckner.lan.fli4l ([192.168.1.1]:35444)\n by fli4l.lan.fli4l with esmtp (Exim 4.99.1)\n (envelope-from ) id 1wDgrB-000000002Fa-0P45\n for buildroot@buildroot.org; Fri, 17 Apr 2026 10:55:29 +0000"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp4.osuosl.org D799040C3E","OpenDKIM Filter v2.11.0 smtp4.osuosl.org 21028409D5"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1776423348;\n\tbh=lPKmZvRvJueTgw8FEAQDobpj3DK96tG9RiwPTMoxjMA=;\n\th=From:To:Date:In-Reply-To:References:Subject:List-Id:\n\t List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:\n\t From;\n\tb=G9vXMv3qYHT5q8epoVwVueOFykQZTSWwyoW4NCDf2/E1GZ0pJh9N+S1CDYedEQ0qz\n\t LlohBJJDO13bFH/pu8Htc4z2q/EZx6qXtb+lP/azIKPz990e55K/dM/AHrpW63v5zt\n\t zIQkUTXB3GPizaXocZotPRywiEzHimYnbGvYWwdhj6aCp90aD+IHTD7yxhquqFotSs\n\t 3oiRe3MIZ0tMXlFVJEs5yCHJlHmWWMRPsJs4VPOFZ0Qv05XFGny7MsEjQpWWbu9ATR\n\t BBLAAb/WLP+QTbrhVPKbgBXSJRX+VM5SXZSXs2SAFrA+ajblLThYWh+Pdn03kW7CoQ\n\t 6uYMrqS15WFoA==","Received-SPF":"Pass (mailfrom) identity=mailfrom; client-ip=85.13.140.57;\n helo=dd20012.kasserver.com; envelope-from=bernd@kuhls.net;\n receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp4.osuosl.org 21028409D5","From":"Bernd Kuhls ","To":"buildroot@buildroot.org","Date":"Fri, 17 Apr 2026 12:55:29 +0200","Message-ID":"<20260417105529.4147375-2-bernd@kuhls.net>","X-Mailer":"git-send-email 2.47.3","In-Reply-To":"<20260417105529.4147375-1-bernd@kuhls.net>","References":"<20260417105529.4147375-1-bernd@kuhls.net>","MIME-Version":"1.0","X-Spamd-Bar":"--","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=kuhls.net;\n s=kas202511301023; t=1776423329;\n bh=VJqFebxRmQGAM/gtfMe0uyT6qBphsiOPLFYUMCMUMzU=;\n h=From:To:Subject:Date:In-Reply-To:From;\n b=gymkwRnel7hyodz62rfdJx/ajINomcmia8jYpNbNbrzdk8yTFOEoW5UPCXHRjIVxj\n svxbqyRm97CG2jn6WN5aHdpvpxU6NjEDr/nyoGbrvKhN1hqVHxW7fOVRKRw1sn1/6X\n CiAUQ3cE77z5e3jMYfTws4+/j46H3brCzTHLG6eQCndq8GJM20iR3HB7+KD4AI+MFR\n 5dLqNs0Npj0IpjhqUVIotvYxVAer40p3Te7jg0NnYocwBvlrYTa4ajirEh+LWCaZB0\n lltbkBRI3HGVo61llem5DwU8BACqE9z7ryDIbMlwgkI1hlW3xZdzzDAfLVp4YbMc3V\n FYhaGZrq3M+bg==","X-Mailman-Original-Authentication-Results":["smtp4.osuosl.org;\n dmarc=pass (p=none dis=none)\n header.from=kuhls.net","smtp4.osuosl.org;\n dkim=pass (2048-bit key,\n unprotected) header.d=kuhls.net header.i=@kuhls.net header.a=rsa-sha256\n header.s=kas202511301023 header.b=gymkwRne"],"Subject":"[Buildroot] [PATCH 2/2] package/ghostscript: security bump to\n version 10.07.0","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "},"content":"https://ghostscript.readthedocs.io/en/gs10.07.0/News.html\n\"This release addresses CVEs: TBC (Two applied for)\"\n\nRemoved patch which is included in this release.\n\nSigned-off-by: Bernd Kuhls \n---\n .../ghostscript/0001-Fix-32-bit-build.patch | 63 -------------------\n package/ghostscript/ghostscript.hash | 4 +-\n package/ghostscript/ghostscript.mk | 2 +-\n 3 files changed, 3 insertions(+), 66 deletions(-)\n delete mode 100644 package/ghostscript/0001-Fix-32-bit-build.patch","diff":"diff --git a/package/ghostscript/0001-Fix-32-bit-build.patch b/package/ghostscript/0001-Fix-32-bit-build.patch\ndeleted file mode 100644\nindex 648e235d3b..0000000000\n--- a/package/ghostscript/0001-Fix-32-bit-build.patch\n+++ /dev/null\n@@ -1,63 +0,0 @@\n-From 3c0be6e4fcffa63e4a5a1b0aec057cebc4d2562f Mon Sep 17 00:00:00 2001\n-From: Ken Sharp \n-Date: Wed, 10 Sep 2025 08:55:30 +0100\n-Subject: [PATCH] Fix 32-bit build\n-\n-Bug #708824 \"ghostscript 10.06.0 compilation failure on 32-bit archs\"\n-\n-nbytes shiouldn't be an intptr_t, it doesn't get used for pointer\n-arithmetic. Previously it was a uint, should be a int64_t, to fit with\n-all the other devices.\n-\n-Checked other warnings, and found a (very minor) one in gdevdbit.c, fix\n-that while we're here (signed/unsigned mismatch, we don't really care).\n-\n-Upstream: https://github.com/ArtifexSoftware/ghostpdl/commit/3c0be6e4fcffa63e4a5a1b0aec057cebc4d2562f\n-\n-Signed-off-by: Titouan Christophe \n----\n- base/gdevdbit.c | 2 +-\n- base/gdevmpla.c | 6 +++---\n- 2 files changed, 4 insertions(+), 4 deletions(-)\n-\n-diff --git a/base/gdevdbit.c b/base/gdevdbit.c\n-index e07cc3f3b8..1b5c69325b 100644\n---- a/base/gdevdbit.c\n-+++ b/base/gdevdbit.c\n-@@ -191,7 +191,7 @@ gx_default_copy_alpha_hl_color(gx_device * dev, const byte * data, int data_x,\n- fit_copy(dev, data, data_x, raster, id, x, y, width, height);\n- row_alpha = data;\n- out_raster = bitmap_raster(width * (size_t)byte_depth);\n-- if (check_64bit_multiply(out_raster, ncomps, &product) != 0)\n-+ if (check_64bit_multiply(out_raster, ncomps, (int64_t *) &product) != 0)\n- return gs_note_error(gs_error_undefinedresult);\n- gb_buff = gs_alloc_bytes(mem, product, \"copy_alpha_hl_color(gb_buff)\");\n- if (gb_buff == 0) {\n-diff --git a/base/gdevmpla.c b/base/gdevmpla.c\n-index 2f0d522561..ffc5ff42e6 100644\n---- a/base/gdevmpla.c\n-+++ b/base/gdevmpla.c\n-@@ -1954,12 +1954,12 @@ mem_planar_strip_copy_rop2(gx_device * dev,\n- int i;\n- int j;\n- intptr_t chunky_sraster;\n-- intptr_t nbytes;\n-+ int64_t nbytes;\n- byte **line_ptrs;\n- byte *sbuf, *buf;\n- \n- chunky_sraster = sraster * (intptr_t)mdev->num_planar_planes;\n-- if (check_64bit_multiply(height, chunky_sraster, (size_t *)&nbytes) != 0)\n-+ if (check_64bit_multiply(height, chunky_sraster, &nbytes) != 0)\n- return gs_note_error(gs_error_undefinedresult);\n- buf = gs_alloc_bytes(mdev->memory, nbytes, \"mem_planar_strip_copy_rop(buf)\");\n- if (buf == NULL) {\n-@@ -2003,7 +2003,7 @@ mem_planar_strip_copy_rop2(gx_device * dev,\n- intptr_t i;\n- intptr_t chunky_t_raster;\n- int chunky_t_height;\n-- intptr_t nbytes;\n-+ int64_t nbytes;\n- byte **line_ptrs;\n- byte *tbuf, *buf;\n- gx_strip_bitmap newtex;\ndiff --git a/package/ghostscript/ghostscript.hash b/package/ghostscript/ghostscript.hash\nindex e50113ecfe..c2e48b01e6 100644\n--- a/package/ghostscript/ghostscript.hash\n+++ b/package/ghostscript/ghostscript.hash\n@@ -1,5 +1,5 @@\n-# From https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10060/SHA512SUMS\n-sha512 e9efa6a334cf34703f565f5043dd794452270415b34c2bea260e9dac6c72ebbcbedfa2e4cb9029841f8f582bbce91be8160e135a190081f3262bcf04417f80f1 ghostscript-10.06.0.tar.xz\n+# From https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10070/SHA512SUMS\n+sha512 1c2a14951223c975a53bd9767c28bd3a6e420c385a5e0d7a60a5ff5b091bc027929c815bf57cddf97611e8d265ece1c219321737f2cabb5646685c6e8cdb85c9 ghostscript-10.07.0.tar.xz\n \n # Hash for license file:\n sha256 8ce064f423b7c24a011b6ebf9431b8bf9861a5255e47c84bfb23fc526d030a8b LICENSE\ndiff --git a/package/ghostscript/ghostscript.mk b/package/ghostscript/ghostscript.mk\nindex 1fc850ad20..159e06db91 100644\n--- a/package/ghostscript/ghostscript.mk\n+++ b/package/ghostscript/ghostscript.mk\n@@ -4,7 +4,7 @@\n #\n ################################################################################\n \n-GHOSTSCRIPT_VERSION = 10.06.0\n+GHOSTSCRIPT_VERSION = 10.07.0\n GHOSTSCRIPT_SOURCE = ghostscript-$(GHOSTSCRIPT_VERSION).tar.xz\n GHOSTSCRIPT_SITE = https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs$(subst .,,$(GHOSTSCRIPT_VERSION))\n GHOSTSCRIPT_LICENSE = AGPL-3.0\n","prefixes":["2/2"]}