On Mon, Mar 11, 2019 at 07:59:50PM -0600, Anthony J. Bentley wrote:
> ghostview hasn't been updated since its import 21 years ago.
> There's no homepage and the distfile is no longer available on the
> GNU mirrors.
> 
> DESCR proclaims its ability to parse Adobe documents, etc. Given the
> generally poor quality of C code 20 years ago, and the number of
> high-profile GhostScript vulnerabilities in the meantime, and the many
> alternative PostScript viewers like gv, and evince, I'd like to remove
> this "full function user interface for ghostscript 2.4 and later."
> 
> ok?

I wouldn't miss it.

Regarding ghostscript itself: I'm aware that it's hopelessly out
of date, and I really hope to find enought time to update it to the
newest version, which will more or less be a complete rework of the
port. But even after an update, I wouldn't trust it enough to process
arbitrary input.

Ciao,
        Kili

Reply via email to