diff options
| author |   Anuj Mittal <anuj.mittal@intel.com> | 2019-11-27 08:53:24 +0800 |
|---|---|---|
| committer | Anuj Mittal <anuj.mittal@intel.com> | 2019-12-06 13:14:48 +0800 |
| commit | 85ae609d789763f9a6400dc603b675cb57bd7654 (patch) | |
| tree | 4516057e68473c681f9fd79aabae7f23b62f504c | |
| parent | d54d6c994850f4c6994dc0974f905148a024e98f (diff) | |
| download | openembedded-core-contrib-85ae609d789763f9a6400dc603b675cb57bd7654.tar.gz | |
ghostscript: fix for CVE-2019-14811 is same as CVE-2019-14813
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14813
https://www.openwall.com/lists/oss-security/2019/08/28/2
(From OE-Core rev: afef29326b4332fc87c53a5d9d43288cddcdd944)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
| -rw-r--r-- | meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14811-0001.patch | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14811-0001.patch b/meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14811-0001.patch index 3f28555e8a..d4ef0996ec 100644 --- a/meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14811-0001.patch +++ b/meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14811-0001.patch @@ -12,6 +12,7 @@ handler being used, but nevertheless, prevent access to .forceput from .setuserparams2. CVE: CVE-2019-14811 +CVE: CVE-2019-14813 Upstream-Status: Backport [git://git.ghostscript.com/ghostpdl.git] Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> |