Bug#840691: ghostscript and evince/libspectre problem

2016-10-27 Thread Salvatore Bonaccorso
Hi, On Thu, Oct 27, 2016 at 08:54:39AM +0200, Moritz Muehlenhoff wrote: > On Wed, Oct 26, 2016 at 11:09:54PM -0400, Roberto C. Sánchez wrote: > > On Tue, Oct 25, 2016 at 09:54:01PM +0200, Salvatore Bonaccorso wrote: > > > Hi Roberto > > > > > > Could you double-check/confirm if you see the same >

Bug#840691: s9-common breakage

2016-10-27 Thread Edgar Fuß
The problem is line 2011 in /usr/share/ghostscript/9.05/Resource/Init/gs_init.ps: systemdict /getenv {pop //false} put change that to systemdict /getenv {pop //false} .forceput (gs-commits 99e331527d541a8f01ad5455c4eb2aabd67281a6) and it works.

Bug#840691: ghostscript and evince/libspectre problem

2016-10-27 Thread Roberto C . Sánchez
On Thu, Oct 27, 2016 at 08:54:39AM +0200, Moritz Muehlenhoff wrote: > > Salvatore mentioned that the same bug occurs when unstable has the security > patches merged (which hasn't happened so far :-/), so this needs to be > reported > upstream. > Would that be to ghostscript upstream? I guess t

Bug#840691: ghostscript and evince/libspectre problem

2016-10-27 Thread Moritz Muehlenhoff
On Thu, Oct 27, 2016 at 06:31:43AM -0400, Roberto C. Sánchez wrote: > On Thu, Oct 27, 2016 at 08:54:39AM +0200, Moritz Muehlenhoff wrote: > > > > Salvatore mentioned that the same bug occurs when unstable has the security > > patches merged (which hasn't happened so far :-/), so this needs to be

Bug#840691: ghostscript and evince/libspectre problem

2016-10-27 Thread Roberto C . Sánchez
On Thu, Oct 27, 2016 at 12:35:16PM +0200, Moritz Muehlenhoff wrote: > On Thu, Oct 27, 2016 at 06:31:43AM -0400, Roberto C. Sánchez wrote: > > On Thu, Oct 27, 2016 at 08:54:39AM +0200, Moritz Muehlenhoff wrote: > > > > > > Salvatore mentioned that the same bug occurs when unstable has the > > > se

Bug#840691: s9-common breakage

2016-10-27 Thread Salvatore Bonaccorso
Hi Edgar, On Thu, Oct 27, 2016 at 10:01:53AM +0200, Edgar Fuß wrote: > The problem is line 2011 in > /usr/share/ghostscript/9.05/Resource/Init/gs_init.ps: > systemdict /getenv {pop //false} put > change that to > systemdict /getenv {pop //false} .forceput > (gs-commits 99e331527d541a8

Bug#840691: ghostscript and evince/libspectre problem

2016-10-27 Thread Salvatore Bonaccorso
Hi On Thu, Oct 27, 2016 at 06:40:12AM -0400, Roberto C. Sánchez wrote: > On Thu, Oct 27, 2016 at 12:35:16PM +0200, Moritz Muehlenhoff wrote: > > On Thu, Oct 27, 2016 at 06:31:43AM -0400, Roberto C. Sánchez wrote: > > > On Thu, Oct 27, 2016 at 08:54:39AM +0200, Moritz Muehlenhoff wrote: > > > > >

Bug#840691: gs9-common breakage

2016-10-27 Thread Edgar Fuß
Please note that, through 9.05~dfsg-6.3+deb7u3 in debian-security, this also breaks oldstable since the day before yesterday. I wonder why that update got pushed through although it was (for two weeks) known to have severe issues.

Bug#840691: ghostscript and evince/libspectre problem

2016-10-27 Thread Roberto C . Sánchez
On Thu, Oct 27, 2016 at 12:53:56PM +0200, Salvatore Bonaccorso wrote: > > Edgar Fuss has now posted where the bug actually seem to be. I'm > currently building ghostscript with that. > Excellent. If it works, I will apply the same patch to the wheezy package and upload it. Let me know if you ne

Bug#840691: ghostscript and evince/libspectre problem

2016-10-27 Thread Salvatore Bonaccorso
Hi, On Thu, Oct 27, 2016 at 12:53:56PM +0200, Salvatore Bonaccorso wrote: > Hi > > On Thu, Oct 27, 2016 at 06:40:12AM -0400, Roberto C. Sánchez wrote: > > On Thu, Oct 27, 2016 at 12:35:16PM +0200, Moritz Muehlenhoff wrote: > > > On Thu, Oct 27, 2016 at 06:31:43AM -0400, Roberto C. Sánchez wrote:

Processed: tagging 840691

2016-10-27 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 840691 + confirmed pending Bug #840691 [libgs9] libgs9: security update DSA-3691-1 breaks zathura, evince, ... in jessie Bug #842154 [libgs9] evince: Crashed while opening PS document Added tag(s) pending and confirmed. Added tag(s) confirme

Bug#840691: ghostscript and evince/libspectre problem

2016-10-27 Thread Edgar Fuß
> If it works, I will apply the same patch to the wheezy package and upload it. I didn’t look at the jessie package but it is wheezy with debian-security where I figured out that changing that ,,put’’ to ,,.forceput’’ made evince display PostScript again.

Bug#840691: ghostscript and evince/libspectre problem

2016-10-27 Thread Roberto C . Sánchez
On Thu, Oct 27, 2016 at 03:31:15PM +0200, Edgar Fuß wrote: > > If it works, I will apply the same patch to the wheezy package and upload > > it. > I didn’t look at the jessie package but it is wheezy with debian-security > where I figured out that changing that ,,put’’ to ,,.forceput’’ made evinc

Bug#840691: ghostscript and evince/libspectre problem

2016-10-27 Thread Roberto C . Sánchez
On Thu, Oct 27, 2016 at 01:12:10PM +0200, Salvatore Bonaccorso wrote: > > Packages with that patch added are now as well on > > https://people.debian.org/~carnil/tmp/ghostscript/ > > Please test those if possible for you. > Salvatore, Is your plan to release this as a -2 regression update to

Bug#840691: ghostscript and evince/libspectre problem

2016-10-27 Thread Salvatore Bonaccorso
Hi Roberto, On Thu, Oct 27, 2016 at 09:50:02AM -0400, Roberto C. Sánchez wrote: > Is your plan to release this as a -2 regression update to the previous > DSA? I assume that is what you plan to do, but I wanted to confirm to > be certain. Yes exactly, that's the plan. I would still like to hear

Bug#840691: ghostscript and evince/libspectre problem

2016-10-27 Thread Francesco Poli
On Thu, 27 Oct 2016 18:17:20 +0200 Salvatore Bonaccorso wrote: [...] > On Thu, Oct 27, 2016 at 09:50:02AM -0400, Roberto C. Sánchez wrote: > > Is your plan to release this as a -2 regression update to the previous > > DSA? I assume that is what you plan to do, but I wanted to confirm to > > be ce

Bug#840691: ghostscript and evince/libspectre problem

2016-10-27 Thread Roberto C . Sánchez
On Thu, Oct 27, 2016 at 11:43:01PM +0200, Francesco Poli wrote: > On Thu, 27 Oct 2016 18:17:20 +0200 Salvatore Bonaccorso wrote: > > [...] > > On Thu, Oct 27, 2016 at 09:50:02AM -0400, Roberto C. Sánchez wrote: > > > Is your plan to release this as a -2 regression update to the previous > > > DSA?

Bug#840691: ghostscript and evince/libspectre problem

2016-10-27 Thread Salvatore Bonaccorso
Hi Francesco, On Thu, Oct 27, 2016 at 11:43:01PM +0200, Francesco Poli wrote: > On Thu, 27 Oct 2016 18:17:20 +0200 Salvatore Bonaccorso wrote: > > [...] > > On Thu, Oct 27, 2016 at 09:50:02AM -0400, Roberto C. Sánchez wrote: > > > Is your plan to release this as a -2 regression update to the prev

Bug#840691: ghostscript and evince/libspectre problem

2016-10-27 Thread Salvatore Bonaccorso
On Thu, Oct 27, 2016 at 08:54:39PM -0400, Roberto C. Sánchez wrote: > On Thu, Oct 27, 2016 at 11:43:01PM +0200, Francesco Poli wrote: > > On Thu, 27 Oct 2016 18:17:20 +0200 Salvatore Bonaccorso wrote: > > > > [...] > > > On Thu, Oct 27, 2016 at 09:50:02AM -0400, Roberto C. Sánchez wrote: > > > > I