Re: Enable usage of epswrite again

--000000000000bef4e005bb662668
Content-Type: text/plain; charset="UTF-8"

Thanks All

We will not be able to change our applications as they are 3rdy parts we do
not have code . Due to current vulnerabilities found by our audit team we
have now to move from  GS 9.14 to 9.Latest . But when we installed new GS
its stated giving error Unknown device: "epswrite".

Is it possible to have someone add epswrite back  or clone and rename
eps2write as  epswrite. Just for compatibility in the master. I do not want
to compile my own GS




On Mon, Feb 15, 2021 at 1:52 AM Zdenek Dohnal <[email protected]> wrote:

> Hi all,
>
> IMHO it is allowed, but it brings more responsibilities than the pros in
> most cases. The best course of action (if possible) would be to rewrite
> your code to use the new Ghostscript API.
>
> If that's not possible, contact Ghostscript developers, Ken Sharp and
> Chris Liddell, on IRC channel #ghostscript (freenode.net server) and
> talk about a possibilities how to solve it.
>
> Downloading and customizing code on your own must be the last resort -
> because by doing this, your code will depend by your specific
> Ghostscript version you customized - which means, you will need to
> bundle Ghostscript into your software to make it work in all environments.
>
> Once you will start bundling Ghostscript, then you become responsible
> for fixing Ghostscript issues your bundled code has - especially
> security vulnerabilities. So you'll end up periodically updating your
> bundled Ghostscript and backporting security fixes, which were applied
> in the original project lately.
>
> To sum it up, once you bundle, you will end up maintaining your
> Ghostscript project, or you let it be with bugs and vulnerabilities in
> your software. That's why it is a last resort.
>
> Have a nice day,
>
>
> Zdenek
>
> On 2/14/21 7:08 PM, Jose E. Marchesi wrote:
> > Hi Amit.
> >
> >> Hi Is there a way to download an open-source and change it to
> customize? We
> >> need to download the Ghost script and try to rename one of the function
> >> eps2write as epswrite (deprecated version) for our legacy programs to be
> >> compatible with the newer version of ghost script In the middle
> releases,
> >> the epswrite device was renamed as eps2write causing us to not being
> able
> >> to upgrade to latest version
> > That's perfectly allowed.  As free software, you are free to adapt it to
> > your needs and to use and/or distribute the modified versions.
> >
> > See https://www.gnu.org/philosophy/free-sw.en.html
> >
> --
> Zdenek Dohnal
> Software Engineer
> Red Hat Czech - Brno TPB-C
>
>
>

--000000000000bef4e005bb662668
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Thanks All<div><br></div><div>We will not be able to=C2=A0=
change=C2=A0our applications as they are 3rdy parts we do not have code . D=
ue to current vulnerabilities=C2=A0found by our audit team we have now to m=
ove from=C2=A0 GS 9.14 to 9.Latest=C2=A0. But when we installed new GS its =
stated giving=C2=A0error=C2=A0<span style=3D"color:rgb(0,0,0);white-space:p=
re-wrap">Unknown device: &quot;epswrite&quot;.</span></div><div><span style=
=3D"color:rgb(0,0,0);white-space:pre-wrap"><br></span></div><div><span styl=
e=3D"color:rgb(0,0,0);white-space:pre-wrap">Is it possible to have someone =
add </span>epswrite back=C2=A0 or clone and rename=C2=A0

eps2write as=C2=A0

epswrite. Just for compatibility=C2=A0in the master. I do not want to compi=
le=C2=A0my own GS</div><div><br></div><div><br></div><div><br></div></div><=
br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Mon,=
 Feb 15, 2021 at 1:52 AM Zdenek Dohnal &lt;<a href=3D"mailto:zdohnal@redhat=
.com" target=3D"_blank">[email protected]</a>&gt; wrote:<br></div><blockqu=
ote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px=
 solid rgb(204,204,204);padding-left:1ex">Hi all,<br>
<br>
IMHO it is allowed, but it brings more responsibilities than the pros in<br=
>
most cases. The best course of action (if possible) would be to rewrite<br>
your code to use the new Ghostscript API.<br>
<br>
If that&#39;s not possible, contact Ghostscript developers, Ken Sharp and<b=
r>
Chris Liddell, on IRC channel #ghostscript (<a href=3D"http://freenode.net"=
 rel=3D"noreferrer" target=3D"_blank">freenode.net</a> server) and<br>
talk about a possibilities how to solve it.<br>
<br>
Downloading and customizing code on your own must be the last resort -<br>
because by doing this, your code will depend by your specific<br>
Ghostscript version you customized - which means, you will need to<br>
bundle Ghostscript into your software to make it work in all environments.<=
br>
<br>
Once you will start bundling Ghostscript, then you become responsible<br>
for fixing Ghostscript issues your bundled code has - especially<br>
security vulnerabilities. So you&#39;ll end up periodically updating your<b=
r>
bundled Ghostscript and backporting security fixes, which were applied<br>
in the original project lately.<br>
<br>
To sum it up, once you bundle, you will end up maintaining your<br>
Ghostscript project, or you let it be with bugs and vulnerabilities in<br>
your software. That&#39;s why it is a last resort.<br>
<br>
Have a nice day,<br>
<br>
<br>
Zdenek<br>
<br>
On 2/14/21 7:08 PM, Jose E. Marchesi wrote:<br>
&gt; Hi Amit.<br>
&gt;<br>
&gt;&gt; Hi Is there a way to download an open-source and change it to cust=
omize? We<br>
&gt;&gt; need to download the Ghost script and try to rename one of the fun=
ction<br>
&gt;&gt; eps2write as epswrite (deprecated version) for our legacy programs=
 to be<br>
&gt;&gt; compatible with the newer version of ghost script In the middle re=
leases,<br>
&gt;&gt; the epswrite device was renamed as eps2write causing us to not bei=
ng able<br>
&gt;&gt; to upgrade to latest version<br>
&gt; That&#39;s perfectly allowed.=C2=A0 As free software, you are free to =
adapt it to<br>
&gt; your needs and to use and/or distribute the modified versions.<br>
&gt;<br>
&gt; See <a href=3D"https://www.gnu.org/philosophy/free-sw.en.html" rel=3D"=
noreferrer" target=3D"_blank">https://www.gnu.org/philosophy/free-sw.en.htm=
l</a><br>
&gt;<br>
-- <br>
Zdenek Dohnal<br>
Software Engineer<br>
Red Hat Czech - Brno TPB-C<br>
<br>
<br>
</blockquote></div>

--000000000000bef4e005bb662668--