diff options
| author | Joe Slater <jslater@windriver.com> | 2017-08-22 14:14:46 -0700 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2017-08-23 08:47:03 +0100 |
| commit | 67afd9ead60c139484c5179be3c0dcbbf87938c3 (patch) | |
| tree | 5b19856cfaffca20691d76886cb1a0fdb57511dc /meta/recipes-extended/ghostscript/ghostscript_9.21.bb | |
| parent | 8efe72508002772df08664d9bb0d5f8b25497ce5 (diff) | |
| download | poky-67afd9ead60c139484c5179be3c0dcbbf87938c3.tar.gz | |
ghostscript: CVE-2017-9727, -9835, -11714
CVE-2017-9727: make bounds check in gx_ttfReader__Read more robust
CVE-2017-9835: bounds check the array allocations methods
CVE-2017-11714: prevent trying to reloc a freed object
(From OE-Core rev: 2eae91f9fa1cfdd3f0e6111956c8f193fd0db69f)
Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-extended/ghostscript/ghostscript_9.21.bb')
| -rw-r--r-- | meta/recipes-extended/ghostscript/ghostscript_9.21.bb | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/meta/recipes-extended/ghostscript/ghostscript_9.21.bb b/meta/recipes-extended/ghostscript/ghostscript_9.21.bb index 93589cc2b9..bf985c44a3 100644 --- a/meta/recipes-extended/ghostscript/ghostscript_9.21.bb +++ b/meta/recipes-extended/ghostscript/ghostscript_9.21.bb | |||
| @@ -41,6 +41,9 @@ SRC_URI = "${SRC_URI_BASE} \ | |||
| 41 | file://CVE-2017-9612.patch \ | 41 | file://CVE-2017-9612.patch \ |
| 42 | file://CVE-2017-9739.patch \ | 42 | file://CVE-2017-9739.patch \ |
| 43 | file://CVE-2017-9726.patch \ | 43 | file://CVE-2017-9726.patch \ |
| 44 | file://CVE-2017-9727.patch \ | ||
| 45 | file://CVE-2017-9835.patch \ | ||
| 46 | file://CVE-2017-11714.patch \ | ||
| 44 | " | 47 | " |
| 45 | 48 | ||
| 46 | SRC_URI_class-native = "${SRC_URI_BASE} \ | 49 | SRC_URI_class-native = "${SRC_URI_BASE} \ |