Bugzilla Bug 206893

nm -D --defined-only /usr/bin/gs | grep png

This is enough to show the amount of libpng functions present.

Note that they are present both in /usr/bin/gs and in /usr/lib/libgs.so.

And cartman from Pardus just let me note that there's internal jpeg too. They
do use system libraries for those.

Also ships with a copy of jasper, but a modified one to that, so it's not
possible to use the system copy of that just yet.

jpeg and libpng are gone in app-text/ghostscript-gpl-8.61-r2.

zlib remains for now since I was not able to successfully compile ghostscript
without the internal one yet.

Which versions of zlib and libpng is bundled?

(In reply to comment #3)
> Which versions of zlib and libpng is bundled?
> 

zlib seems to be 1.2.3 and libpng 1.2.22.

Both seems safe security wise ATM.

On a first glance it seems to be a lot worse. ghostscript-gpl comes with a lot
of internal libraries such as 

expat, jasper, jbig2dec, icclib

which should be linked dependencies, instead using the internal lib crap. Most
disturbing form the maintenance quality pov is that jasper actually was listed
as dependency in former ebuilds, but simply removed.

jasper is now also gone thanks to a patch borrowed from Fedora, let's see how
it works out. I also rm -rf expat now for the sake of completeness, however I'm
unsure if it was used anyway. So the three remaining ones are jbig2dec, icclib
and zlib for now.

zlib should be gone now, too in versions >=app-text/ghostscript-gpl-8.63. At
least they get rm -rf'd, not exactly sure how to interpret the nm output
though.