summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended
diff options
context:
space:
mode:
authorAnuj Mittal <anuj.mittal@intel.com>2019-11-27 08:53:24 +0800
committerRichard Purdie <richard.purdie@linuxfoundation.org>2019-12-06 14:49:33 +0000
commitf5d638a93ed5d80053b8bcb378af3291299b866e (patch)
treede52075226a85a02b1eea4e45a058a125f3c5c0f /meta/recipes-extended
parent4c72d908226ffc8abf77a9709e27ac502e5af4e6 (diff)
downloadpoky-f5d638a93ed5d80053b8bcb378af3291299b866e.tar.gz
ghostscript: fix for CVE-2019-14811 is same as CVE-2019-14813
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14813 https://www.openwall.com/lists/oss-security/2019/08/28/2 (From OE-Core rev: afef29326b4332fc87c53a5d9d43288cddcdd944) (From OE-Core rev: 85ae609d789763f9a6400dc603b675cb57bd7654) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-extended')
-rw-r--r--meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14811-0001.patch1
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14811-0001.patch b/meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14811-0001.patch
index 3f28555e8a..d4ef0996ec 100644
--- a/meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14811-0001.patch
+++ b/meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14811-0001.patch
@@ -12,6 +12,7 @@ handler being used, but nevertheless, prevent access to .forceput from
12.setuserparams2. 12.setuserparams2.
13 13
14CVE: CVE-2019-14811 14CVE: CVE-2019-14811
15CVE: CVE-2019-14813
15Upstream-Status: Backport [git://git.ghostscript.com/ghostpdl.git] 16Upstream-Status: Backport [git://git.ghostscript.com/ghostpdl.git]
16 17
17Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> 18Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com>