Fix Ghostscript installation instructions and add warning

docs/installation.rst

@@ -391,15 +391,17 @@ package manager:
 
 * ``winget install -e --id Python.Python.3.11``
 * ``winget install -e --id UB-Mannheim.TesseractOCR``
-* ``winget install -e --id ArtifexSoftware.GhostScript``
 
+You will need to install Ghostscript manually, `since it does not support automated
+installs anymore <https://artifex.com/news/ghostscript-10.01.0-disabling-silent-install-option>`_.
+
+* `Ghostscript download page <https://ghostscript.com/releases/gsdnld.html>`_.`
 
 (Or alternately, using the `Chocolatey <https://chocolatey.org/>`_ package manager, install
 the following when running in an Administrator command prompt):
 
 * ``choco install python3``
 * ``choco install --pre tesseract``
-* ``choco install ghostscript``
 * ``choco install pngquant`` (optional)
 
 Either set of commands will install the required software. At the mmoment there is no

docs/release_notes.rst

@@ -28,6 +28,12 @@ tagged yet.
 
 .. |OCRmyPDF PyPI| image:: https://img.shields.io/pypi/v/ocrmypdf.svg
 
+v15.4.4
+=======
+
+-  Fixed documentation for installing Ghostscript on Windows. :issue:`1198`
+-  Added warning message about security issue in older versions of Ghostscript.
+
 v15.4.3
 =======
 

src/ocrmypdf/builtin_plugins/ghostscript.py

@@ -6,6 +6,8 @@
 
 import logging
 
+from packaging.version import Version
+
 from ocrmypdf import hookimpl
 from ocrmypdf._exec import ghostscript
 from ocrmypdf.exceptions import MissingDependencyError
@@ -58,8 +60,15 @@ def check_options(options):
     if gs_version in BLACKLISTED_GS_VERSIONS:
         raise MissingDependencyError(
             f"Ghostscript {gs_version} contains serious regressions and is not "
-            "supported. Please upgrade to a newer version, or downgrade to the "
-            "previous version."
+            "supported. Please upgrade to a newer version."
+        )
+    if gs_version < Version('10.02.0'):
+        log.warning(
+            f"The installed version of Ghostscript {gs_version}, contains a remote "
+            "code execution security vulnerability. Please upgrade to a newer "
+            "version. For details see CVE-2023-43115. The issue is not known to "
+            "affect OCRmyPDF or processing PDFs with Ghostscript, but upgrading "
+            "Ghostscript is recommended."
         )
 
     if options.output_type == 'pdfa':