On Fri, Jan 14, 2022 at 08:16:14PM +0100, Volker Schlecht wrote: > Hi, > > ok, so here's my first attempt. I did manage to use system and ports > libraries, except for jbig2dec. Here the version in ports is too old. > > I bumped the shared object version from 15.0 to 16.0 - not sure if that's > advisable and/or necessary, but I think for a first shot it's pretty good ;) > > Looking forward to everyone's feedback. There seem to be a bunch of really > nasty and exploitable bugs in ghostscript versions < 9.55 so I hope we can > somehow get a more recent version into ports. > > Kili, I would be willing to take over maintainership, if you want to get rid > of it.
I think upgrading jbig2dec might be worthwhile. A quick read of show-reverse-deps -v shows it actually has few direct consumers Mostly ghostscript, imagemagick, some kde gooey.
