configure.ac | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 [patch] fix a little bitrot in the cross-compiling logic

Removing the option to disable FAPI meant configuring for cross compiling would
fail because the option being passed to the sub-call to configure would include
an unknown command line option.

base/sbcp.c | 10 9 + 1 - 0 !
1 file changed, 9 insertions(+), 1 deletion(-)

 graphics library - prevent buffer overrun in (t)bcp encoding

base/gpmisc.c | 31 22 + 9 - 0 !
base/gslibctx.c | 56 42 + 14 - 0 !
2 files changed, 64 insertions(+), 23 deletions(-)

 bug 706761: don't "reduce" %pipe% file names for permission
 validation

base/gpmisc.c | 2 1 + 1 - 0 !
base/gslibctx.c | 4 2 + 2 - 0 !
2 files changed, 3 insertions(+), 3 deletions(-)

 bug 706778: 706761 revisit

base/gdevdevn.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 bug 706897: copy pcx buffer overrun fix from devices/gdevpcx.c

devices/gdevijs.c | 4 3 + 1 - 0 !
1 file changed, 3 insertions(+), 1 deletion(-)

 ijs device - try and secure the ijs server startup

base/gdevprn.c | 1 1 + 0 - 0 !
devices/gdevtsep.c | 1 1 + 0 - 0 !
2 files changed, 2 insertions(+)

 bug 707264: fix tiffsep(1) requirement for seekable output files

psi/zmisc1.c | 8 8 + 0 - 0 !
1 file changed, 8 insertions(+)

 in safer (default) don't allow eexec seeds other than the type 1
 standard

devices/gdevupd.c | 31 31 + 0 - 0 !
1 file changed, 31 insertions(+)

 uniprint device - prevent string configuration changes when safer

base/gpmisc.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 bug #707691

base/gpmisc.c | 21 21 + 0 - 0 !
1 file changed, 21 insertions(+)

 bug 707691 part 2

base/gpmisc.c | 34 31 + 3 - 0 !
1 file changed, 31 insertions(+), 3 deletions(-)

 bug #707686

contrib/opvp/gdevopvp.c | 6 6 + 0 - 0 !
1 file changed, 6 insertions(+)

 opvp device - prevent unsafe parameter change with safer

base/gsfont.c | 2 1 + 1 - 0 !
base/gsicc_cache.c | 6 3 + 3 - 0 !
base/gsmalloc.c | 2 1 + 1 - 0 !
base/gxclmem.c | 3 1 + 2 - 0 !
base/gxcpath.c | 4 4 + 0 - 0 !
base/gxpath.c | 6 6 + 0 - 0 !
base/szlibc.c | 2 2 + 0 - 0 !
devices/gdevupd.c | 5 5 + 0 - 0 !
devices/vector/gdevpdtb.c | 2 1 + 1 - 0 !
psi/ialloc.c | 2 1 + 1 - 0 !
psi/igc.c | 4 2 + 2 - 0 !
psi/igcstr.c | 4 2 + 2 - 0 !
psi/iinit.c | 4 4 + 0 - 0 !
psi/imainarg.c | 3 2 + 1 - 0 !
psi/isave.c | 2 1 + 1 - 0 !
psi/iutil.c | 4 4 + 0 - 0 !
16 files changed, 40 insertions(+), 15 deletions(-)

 bug 707510 - review printing of pointers

base/gsicc_cache.c | 7 3 + 4 - 0 !
1 file changed, 3 insertions(+), 4 deletions(-)

 fix compiler warning in optimised build

devices/gdevupd.c | 3 1 + 2 - 0 !
1 file changed, 1 insertion(+), 2 deletions(-)

 coverity ids 414141 & 414145

pdf/pdf_file.c | 6 5 + 1 - 0 !
1 file changed, 5 insertions(+), 1 deletion(-)

 bug 707510 - don't allow pdf files with bad filters to overflow the
 debug buffer

pdf/pdf_sec.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 bug 707510 - don't use strlen on passwords

pdf/pdf_font.c | 45 39 + 6 - 0 !
pdf/pdf_warnings.h | 1 1 + 0 - 0 !
2 files changed, 40 insertions(+), 6 deletions(-)

 bug 707510(3): bounds checks when using cidfont related params

base/gsdevice.c | 17 13 + 4 - 0 !
1 file changed, 13 insertions(+), 4 deletions(-)

 bug 707793: check for overflow validating format string

psi/zfile.c | 6 3 + 3 - 0 !
1 file changed, 3 insertions(+), 3 deletions(-)

 bug 706922: fix filenameforall completion cleanup

psi/zchar.c | 6 5 + 1 - 0 !
1 file changed, 5 insertions(+), 1 deletion(-)

 bug 707007/707015/707025: don't leave a dangling pointer on the stack

psi/zfile.c | 2 2 + 0 - 0 !
psi/zfsample.c | 2 2 + 0 - 0 !
psi/zht1.c | 3 3 + 0 - 0 !
psi/zht2.c | 3 3 + 0 - 0 !
4 files changed, 10 insertions(+)

 postscript interpreter - null dangling references on stack

psi/zfile.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 postscript interpreter - fix buffer length check

psi/zcolor.c | 77 45 + 32 - 0 !
1 file changed, 45 insertions(+), 32 deletions(-)

 ps interpreter review colour code for stack pointers

psi/zcolor.c | 6 6 + 0 - 0 !
1 file changed, 6 insertions(+)

 ps interpreter - check indexed colour space index

psi/zcolor.c | 3 3 + 0 - 0 !
1 file changed, 3 insertions(+)

 ps interpreter - check the type of the pattern implementation

pdf/pdf_xref.c | 20 19 + 1 - 0 !
1 file changed, 19 insertions(+), 1 deletion(-)

 pdf interpreter - sanitise w array values in xref streams

psi/zbfont.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 bug 708131: fix confusion between bytes and shorts

contrib/japanese/gdevnpdl.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 bug 708133: avoid integer overflow leading to buffer overflow

devices/vector/doc_common.c | 8 8 + 0 - 0 !
pcl/pl/plfont.c | 12 9 + 3 - 0 !
2 files changed, 17 insertions(+), 3 deletions(-)

 pcl interpreter - fix decode_glyph for unicode

devices/vector/doc_common.c | 14 9 + 5 - 0 !
1 file changed, 9 insertions(+), 5 deletions(-)

 prevent unicode decoding overrun

contrib/japanese/gdev10v.c | 22 16 + 6 - 0 !
1 file changed, 16 insertions(+), 6 deletions(-)

 bug 708192: fix potential print buffer overflow

base/write_t1.c | 7 4 + 3 - 0 !
psi/zfapi.c | 9 7 + 2 - 0 !
2 files changed, 11 insertions(+), 5 deletions(-)

 bug 708241: fix potential buffer overflow with dollarblend

pdf/pdf_fmap.c | 39 37 + 2 - 0 !
1 file changed, 37 insertions(+), 2 deletions(-)

 bug 707506: cope with double byte chars in ttf scanning code

pdf/pdf_fmap.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 bug 708259: check ttf name size before copying to buffer.

pdf/pdf_func.c | 13 13 + 0 - 0 !
1 file changed, 13 insertions(+)

 pdf interpreter - guard against unsigned int overflow

contrib/japanese/gdev10v.c | 8 5 + 3 - 0 !
1 file changed, 5 insertions(+), 3 deletions(-)

 fix coverity ids 457699 and 457700

configure.ac | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 enable devicen-related device xcfcmyk

Makefile.in | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 set docdir appropriately for debian

man/gs.1 | 15 8 + 7 - 0 !
1 file changed, 8 insertions(+), 7 deletions(-)

 fixes for gs.1 (debian specific path adjustments)

base/unix-aux.mak | 12 6 + 6 - 0 !
1 file changed, 6 insertions(+), 6 deletions(-)

 check multiarch paths

man/gs.1 | 22 6 + 16 - 0 !
1 file changed, 6 insertions(+), 16 deletions(-)

 remove non-debian paths from documentation

man/gs.1 | 26 13 + 13 - 0 !
1 file changed, 13 insertions(+), 13 deletions(-)

 fix debian paths in documentation

man/gs.1 | 4 3 + 1 - 0 !
1 file changed, 3 insertions(+), 1 deletion(-)

 suggest install of ghostscript-doc in documentation

psi/imainarg.c | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

 suggest install of ghostscript-doc in code

man/gs.1 | 3 1 + 2 - 0 !
1 file changed, 1 insertion(+), 2 deletions(-)

 mention ghostscipt-x affect on default device in docs

base/gp_unix.c | 22 22 + 0 - 0 !
devices/vector/gdevpdf.c | 4 3 + 1 - 0 !
devices/vector/gdevpdfe.c | 4 3 + 1 - 0 !
devices/vector/gdevpsu.c | 4 3 + 1 - 0 !
4 files changed, 31 insertions(+), 3 deletions(-)

 allow the build timestamp to be externally set
 In order to make Ghostscript output reproducible, we need a way to
 set the build timestamp to other values than the current time.
 We now consistently use gp_get_realtime() instead of directly calling
 time() or gp_get_usertime() and make gp_get_realtime() use the value
 found in the SOURCE_DATE_EPOCH environment variable if set. Also,
 environment timezone is fixed to UTC if SOURCE_DATE_EPOCH is used to
 avoid variations.

doc/language-bindings/c-sharp-ghost-api.html | 2 1 + 1 - 0 !
doc/language-bindings/c-sharp-ghost-mono.html | 2 1 + 1 - 0 !
doc/language-bindings/c-sharp-ghost-net.html | 2 1 + 1 - 0 !
doc/language-bindings/c-sharp-intro.html | 2 1 + 1 - 0 !
doc/language-bindings/demo-code.html | 2 1 + 1 - 0 !
doc/language-bindings/index.html | 2 1 + 1 - 0 !
doc/language-bindings/java-gsjavajar.html | 2 1 + 1 - 0 !
doc/language-bindings/java-intro.html | 2 1 + 1 - 0 !
doc/language-bindings/python-gsapi.html | 2 1 + 1 - 0 !
doc/language-bindings/python-intro.html | 2 1 + 1 - 0 !
10 files changed, 10 insertions(+), 10 deletions(-)

 avoid remote fonts to avoid privacy breach
 Simply avoid custom fonts for now...