diff options
author | Lee Chee Yang <chee.yang.lee@intel.com> | 2020-08-18 22:06:36 +0800 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2020-08-27 08:25:50 +0100 |
commit | 060ba609bd6ed40c8407934191da60c5e3ad8de7 (patch) | |
tree | 044aa3b9cd9569fb10d72c8fb6c44099468244d6 /meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14869-0001.patch | |
parent | d3b9f11e19ccac0df134ef72c79c0615b8a7d627 (diff) | |
download | poky-060ba609bd6ed40c8407934191da60c5e3ad8de7.tar.gz |
ghostscript: update to 9.52
This is maintenance release consolidating the changes introduced
in 9.50. see :
https://www.ghostscript.com/doc/9.52/News.htm
Drop all custom objarch.h files; ghostscript nowadays generates
that with autoconf.
Freetype can no longer be disabled.
Building out of source tree is broken.
Upgrade include several CVE fixes:
CVE-2020-16287
CVE-2020-16288
CVE-2020-16289
CVE-2020-16290
CVE-2020-16291
CVE-2020-16292
CVE-2020-16293
CVE-2020-16294
CVE-2020-16295
CVE-2020-16296
CVE-2020-16297
CVE-2020-16298
CVE-2020-16299
CVE-2020-16300
CVE-2020-16301
CVE-2020-16302
CVE-2020-16303
CVE-2020-16304
CVE-2020-16305
CVE-2020-16308
CVE-2020-16309
CVE-2020-17538
(From OE-Core rev: 1cee5540ca74c38cc483b28f720e345644d6ca9b)
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14869-0001.patch')
-rw-r--r-- | meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14869-0001.patch | 70 |
1 files changed, 0 insertions, 70 deletions
diff --git a/meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14869-0001.patch b/meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14869-0001.patch deleted file mode 100644 index 715ec1c450..0000000000 --- a/meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14869-0001.patch +++ /dev/null | |||
@@ -1,70 +0,0 @@ | |||
1 | From 485904772c5f0aa1140032746e5a0abfc40f4cef Mon Sep 17 00:00:00 2001 | ||
2 | From: Chris Liddell <chris.liddell@artifex.com> | ||
3 | Date: Tue, 5 Nov 2019 09:45:27 +0000 | ||
4 | Subject: [PATCH] Bug 701841: remove .forceput from /.charkeys | ||
5 | |||
6 | When loading Type 1 or Truetype fonts from disk, we attempt to extend the glyph | ||
7 | name table to include all identifiable glyph names from the Adobe Glyph List. | ||
8 | |||
9 | In the case of Type 1 fonts, the font itself (almost always) marks the | ||
10 | CharStrings dictionary as read-only, hence we have to use .forceput for that | ||
11 | case. | ||
12 | |||
13 | But for Truetype fonts, the CharStrings dictionary is created internally and is | ||
14 | not read-only until *after* we have fully populated it (including the extended | ||
15 | glyph names from the AGL), hence there is no need for .forceput, and no need to | ||
16 | carry the security risk of using it. | ||
17 | |||
18 | Replace with regular put. | ||
19 | |||
20 | CVE: CVE-2019-14869 | ||
21 | Upstream-Status: Backport [git://git.ghostscript.com/ghostpdl.git] | ||
22 | |||
23 | Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> | ||
24 | --- | ||
25 | Resource/Init/gs_ttf.ps | 8 ++++---- | ||
26 | 1 file changed, 4 insertions(+), 4 deletions(-) | ||
27 | |||
28 | diff --git a/Resource/Init/gs_ttf.ps b/Resource/Init/gs_ttf.ps | ||
29 | index e34967d..5354ff0 100644 | ||
30 | --- a/Resource/Init/gs_ttf.ps | ||
31 | +++ b/Resource/Init/gs_ttf.ps | ||
32 | @@ -1301,7 +1301,7 @@ currentdict /.pickcmap_with_no_xlatmap .undef | ||
33 | TTFDEBUG { (\n1 setting alias: ) print dup ==only | ||
34 | ( to be the same as ) print 2 index //== exec } if | ||
35 | |||
36 | - 7 index 2 index 3 -1 roll exch .forceput | ||
37 | + 7 index 2 index 3 -1 roll exch put | ||
38 | } forall | ||
39 | pop pop pop | ||
40 | } | ||
41 | @@ -1319,7 +1319,7 @@ currentdict /.pickcmap_with_no_xlatmap .undef | ||
42 | exch pop | ||
43 | TTFDEBUG { (\n2 setting alias: ) print 1 index ==only | ||
44 | ( to use glyph index: ) print dup //== exec } if | ||
45 | - 5 index 3 1 roll .forceput | ||
46 | + 5 index 3 1 roll put | ||
47 | //false | ||
48 | } | ||
49 | { | ||
50 | @@ -1336,7 +1336,7 @@ currentdict /.pickcmap_with_no_xlatmap .undef | ||
51 | { % CharStrings(dict) isunicode(boolean) cmap(dict) RAGL(dict) gname(name) codep(integer) gindex(integer) | ||
52 | TTFDEBUG { (\3 nsetting alias: ) print 1 index ==only | ||
53 | ( to be index: ) print dup //== exec } if | ||
54 | - exch pop 5 index 3 1 roll .forceput | ||
55 | + exch pop 5 index 3 1 roll put | ||
56 | } | ||
57 | { | ||
58 | pop pop | ||
59 | @@ -1366,7 +1366,7 @@ currentdict /.pickcmap_with_no_xlatmap .undef | ||
60 | } ifelse | ||
61 | ] | ||
62 | TTFDEBUG { (Encoding: ) print dup === flush } if | ||
63 | -} .bind executeonly odef % hides .forceput | ||
64 | +} .bind odef | ||
65 | |||
66 | % ---------------- CIDFontType 2 font loading ---------------- % | ||
67 | |||
68 | -- | ||
69 | 2.20.1 | ||
70 | |||