From 67afd9ead60c139484c5179be3c0dcbbf87938c3 Mon Sep 17 00:00:00 2001 From: Joe Slater Date: Tue, 22 Aug 2017 14:14:46 -0700 Subject: ghostscript: CVE-2017-9727, -9835, -11714 CVE-2017-9727: make bounds check in gx_ttfReader__Read more robust CVE-2017-9835: bounds check the array allocations methods CVE-2017-11714: prevent trying to reloc a freed object (From OE-Core rev: 2eae91f9fa1cfdd3f0e6111956c8f193fd0db69f) Signed-off-by: Joe Slater Signed-off-by: Richard Purdie --- meta/recipes-extended/ghostscript/ghostscript_9.21.bb | 3 +++ 1 file changed, 3 insertions(+) (limited to 'meta/recipes-extended/ghostscript/ghostscript_9.21.bb') diff --git a/meta/recipes-extended/ghostscript/ghostscript_9.21.bb b/meta/recipes-extended/ghostscript/ghostscript_9.21.bb index 93589cc2b9..bf985c44a3 100644 --- a/meta/recipes-extended/ghostscript/ghostscript_9.21.bb +++ b/meta/recipes-extended/ghostscript/ghostscript_9.21.bb @@ -41,6 +41,9 @@ SRC_URI = "${SRC_URI_BASE} \ file://CVE-2017-9612.patch \ file://CVE-2017-9739.patch \ file://CVE-2017-9726.patch \ + file://CVE-2017-9727.patch \ + file://CVE-2017-9835.patch \ + file://CVE-2017-11714.patch \ " SRC_URI_class-native = "${SRC_URI_BASE} \ -- cgit v1.2.3-54-g00ecf