git: 8fa039ee3fb0 - 2023Q2 - print/ghostscript[78]: mark FORBIDDEN

Go to: [ bottom of page ] [ top of archives ] [ this month ]
From: Matthias Andree <mandree_at_FreeBSD.org>
Date: Thu, 13 Apr 2023 19:35:45 UTC
The branch 2023Q2 has been updated by mandree:

URL: https://cgit.FreeBSD.org/ports/commit/?id=8fa039ee3fb08c9697a58815e51f9d271806adcd

commit 8fa039ee3fb08c9697a58815e51f9d271806adcd
Author:     Matthias Andree <mandree@FreeBSD.org>
AuthorDate: 2023-04-13 19:34:03 +0000
Commit:     Matthias Andree <mandree@FreeBSD.org>
CommitDate: 2023-04-13 19:35:42 +0000

    print/ghostscript[78]: mark FORBIDDEN
    
    Let's forbid these DEPRECATED ports.
    
    Security:       CVE-2023-28879
    Security:       25872b25-da2d-11ed-b715-a1e76793953b
    (cherry picked from commit 4a7d4c1ae47e82d39a31402df6fe5922a8cc7445)
---
 print/ghostscript7-base/Makefile     | 2 ++
 print/ghostscript7-commfont/Makefile | 2 ++
 print/ghostscript7-jpnfont/Makefile  | 2 ++
 print/ghostscript7-korfont/Makefile  | 2 ++
 print/ghostscript7-x11/Makefile      | 2 ++
 print/ghostscript8-base/Makefile     | 2 ++
 print/ghostscript8-x11/Makefile      | 2 ++
 7 files changed, 14 insertions(+)

diff --git a/print/ghostscript7-base/Makefile b/print/ghostscript7-base/Makefile
index 9e1c6b80d0a9..d5135ff2ee50 100644
--- a/print/ghostscript7-base/Makefile
+++ b/print/ghostscript7-base/Makefile
@@ -18,6 +18,8 @@ LICENSE=	GPLv2
 DEPRECATED=	Obsolete and unsupported upstream, consider using a more recent version
 EXPIRATION_DATE=2023-06-30
 
+FORBIDDEN=	CVE-2023-28879
+
 LIB_DEPENDS=	libpng.so:graphics/png
 RUN_DEPENDS=	${LOCALBASE}/share/ghostscript/fonts/a010013l.pfb:print/gsfonts
 
diff --git a/print/ghostscript7-commfont/Makefile b/print/ghostscript7-commfont/Makefile
index acef0da5dd94..11b3140d310d 100644
--- a/print/ghostscript7-commfont/Makefile
+++ b/print/ghostscript7-commfont/Makefile
@@ -23,6 +23,8 @@ PLIST_SUB=	GS_RESDIR="${GS_RESDIR}"
 USES=		ghostscript:7,run
 NO_ARCH=	yes
 
+FORBIDDEN=	CVE-2023-28879
+
 CONFLICTS_INSTALL= \
 		ghostscript[789] \
 		ghostscript[789]-nox11 \
diff --git a/print/ghostscript7-jpnfont/Makefile b/print/ghostscript7-jpnfont/Makefile
index 8b49bd452e66..304297c33085 100644
--- a/print/ghostscript7-jpnfont/Makefile
+++ b/print/ghostscript7-jpnfont/Makefile
@@ -10,6 +10,8 @@ COMMENT=	Japanese font support for Ghostscript 7.x
 DEPRECATED=	Obsolete and unsupported upstream
 EXPIRATION_DATE=2023-06-30
 
+FORBIDDEN=	CVE-2023-28879
+
 RUN_DEPENDS=	${LOCALBASE}/share/fonts/std.ja_JP/Ryumin-Light.gs7:japanese/font-std \
 		${LOCALBASE}/share/ghostscript/Resource/CIDFont/Ryumin-Light:print/ghostscript7-commfont
 
diff --git a/print/ghostscript7-korfont/Makefile b/print/ghostscript7-korfont/Makefile
index fccf0035762e..ddad0e40a90b 100644
--- a/print/ghostscript7-korfont/Makefile
+++ b/print/ghostscript7-korfont/Makefile
@@ -10,6 +10,8 @@ COMMENT=	Korean font support for Ghostscript 7.x
 DEPRECATED=	Obsolete and unsupported upstream
 EXPIRATION_DATE=2023-06-30
 
+FORBIDDEN=	CVE-2023-28879
+
 RUN_DEPENDS=	${LOCALBASE}/share/fonts/CIDFont/Munhwa-Regular:korean/munhwafonts-cid \
 		${LOCALBASE}/share/ghostscript/Resource/CIDFont/HYSMyeongJo-Medium:print/ghostscript7-commfont
 
diff --git a/print/ghostscript7-x11/Makefile b/print/ghostscript7-x11/Makefile
index 610dca72620a..5a9994b7db05 100644
--- a/print/ghostscript7-x11/Makefile
+++ b/print/ghostscript7-x11/Makefile
@@ -15,6 +15,8 @@ LICENSE=	GPLv2
 DEPRECATED=	Obsolete and unsupported upstream
 EXPIRATION_DATE=2023-06-30
 
+FORBIDDEN=	CVE-2023-28879
+
 CONFLICTS_INSTALL= \
 		gambc \
 		ghostscript[789] \
diff --git a/print/ghostscript8-base/Makefile b/print/ghostscript8-base/Makefile
index a5667ecb685c..d0633168b751 100644
--- a/print/ghostscript8-base/Makefile
+++ b/print/ghostscript8-base/Makefile
@@ -14,6 +14,8 @@ MAINTAINER=	ports@FreeBSD.org
 COMMENT=	Ghostscript 8.x PostScript interpreter, base part
 WWW=		https://www.cs.wisc.edu/~ghost/doc/GPL/index.htm
 
+FORBIDDEN=	CVE-2023-28879
+
 LICENSE=	GPLv3
 
 DEPRECATED=	Obsolete and unsupported upstream, consider using a more recent version
diff --git a/print/ghostscript8-x11/Makefile b/print/ghostscript8-x11/Makefile
index 36f13ad13be8..05fabcd79b53 100644
--- a/print/ghostscript8-x11/Makefile
+++ b/print/ghostscript8-x11/Makefile
@@ -12,6 +12,8 @@ MAINTAINER=	ports@FreeBSD.org
 COMMENT=	Ghostscript 8.x PostScript interpreter, X11 support
 WWW=		https://www.cs.wisc.edu/~ghost/doc/GPL/index.htm
 
+FORBIDDEN=	CVE-2023-28879
+
 LICENSE=	GPLv3
 
 DEPRECATED=	Obsolete and unsupported upstream