I am delighted to announce a new release of GNU a2ps, the “anything to
PostScript” system.

This is to announce a2ps-4.15.8, a stable release. This release fixes a
buffer overflow, and a failure to build on some older systems.

There have been 13 commits by 1 people in the 21 weeks since 4.15.7.

See the NEWS below for a brief summary.

Thanks to everyone who has contributed!
The following people contributed changes to this release:

  Reuben Thomas (13)

Reuben
 [on behalf of the a2ps maintainers]
==================================================================

Here is the GNU a2ps home page:
    https://gnu.org/s/a2ps/

Here are the compressed sources and a GPG detached signature:
  https://ftpmirror.gnu.org/a2ps/a2ps-4.15.8.tar.gz
  https://ftpmirror.gnu.org/a2ps/a2ps-4.15.8.tar.gz.sig

Use a mirror for higher download bandwidth:
  https://www.gnu.org/order/ftp.html

Here are the SHA256 and SHA3-256 checksums:

  File: a2ps-4.15.8.tar.gz
  SHA256 sum:   8d13915a36ebbfa8e7b236b350cc81adc714acb217a18e8d8c60747c0ad353f9
  SHA3-256 sum: 0dce19c25df3be0ce1fc2b92710c33a724595b3617686cbb904ab60dcdd15b34

Verify the SHA256 checksum with either sha256sum, sha256, or
shasum -a 256.

Verify the SHA3-256 checksum with cksum -a sha3 --check
from coreutils-9.8.

Use a .sig file to verify that the corresponding file (without the
.sig suffix) is intact.  First, be sure to download both the .sig file
and the corresponding tarball.  Then, run a command like this:

  gpg --verify a2ps-4.15.8.tar.gz.sig

The signature should match the fingerprint of the following key:

  pub   rsa2048 2013-12-11 [SC]
        2409 3F01 6FFE 8602 EF44  9BB8 4C8E F3DA 3FD3 7230
  uid   Reuben Thomas <[email protected]>
  uid   keybase.io/rrt <[email protected]>

If that command fails because you don't have the required public key,
or that public key has expired, try the following commands to retrieve
or refresh it, and then rerun the 'gpg --verify' command.

  gpg --locate-external-key [email protected]

  gpg --recv-keys 4C8EF3DA3FD37230

  wget -q -O- 
'https://savannah.gnu.org/project/release-gpgkeys.php?group=a2ps&download=1' | 
gpg --import -

As a last resort to find the key, you can try the official GNU
keyring:

  wget -q https://ftp.gnu.org/gnu/gnu-keyring.gpg
  gpg --keyring gnu-keyring.gpg --verify a2ps-4.15.8.tar.gz.sig

This release is based on the a2ps git repository, available as

  git clone https://https.git.savannah.gnu.org/git/a2ps.git

with commit c41304d1745017322adb12ba40e7f06984e7f14e tagged as v4.15.8.

For a summary of changes and contributors, see:

  https://gitweb.git.savannah.gnu.org/gitweb/?p=a2ps.git;a=shortlog;h=v4.15.8

or run this command from a git-cloned a2ps directory:

  git shortlog v4.15.7..v4.15.8

This release was bootstrapped with the following tools:
  Autoconf 2.72
  Automake 1.18.1
  Gnulib 2025-12-04 481064c5c22c8137188eecb6662ebea03fc6d0b8

NEWS

* Noteworthy changes in release 4.15.8 (2025-12-04) [stable]
 * Bug fixes:
   - Fix a buffer overflow when a long value supplied to -E.
   - Include some header files with system paths, not user paths.
 * Build system:
   - Fix building on systems that need gnulib's malloc wrapper.
   - Remove a generated file from git.
   - Update the version of gettext used.
 * Documentation:
   - Update copyright notices to point to GPL online.


Reply via email to