rpms/ghostscript
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

- No longer need CVE-2008-0411 patch.

Browse Source
This commit is contained in:
Tim Waugh 2008-03-04 17:44:08 +00:00
parent 4ebb1e751f
commit f7a5c92c65
2 changed files with 8 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
ghostscript-CVE-2008-0411.patch
View File

@ -1,13 +0,0 @@
diff -up ghostscript-8.61/src/zicc.c.CVE-2008-0411 ghostscript-8.61/src/zicc.c
--- ghostscript-8.61/src/zicc.c.CVE-2008-0411 2007-09-25 14:31:24.000000000 +0100
+++ ghostscript-8.61/src/zicc.c 2008-02-27 17:07:30.000000000 +0000
@@ -77,6 +77,9 @@ zseticcspace(i_ctx_t * i_ctx_p)
dict_find_string(op, "N", &pnval);
ncomps = pnval->value.intval;
+ if (2*ncomps > sizeof(range_buff)/sizeof(float))
+ return_error(e_rangecheck);
+
/* verify the DataSource entry */
if (dict_find_string(op, "DataSource", &pstrmval) <= 0)
return_error(e_undefined);

16
ghostscript.spec
View File

@ -5,7 +5,7 @@ Summary: A PostScript(TM) interpreter and renderer.
Name: ghostscript
Version: %{gs_ver}
Release: 1%{?dist}
Release: 2%{?dist}
License: GPLv2
URL: http://www.ghostscript.com/
@ -18,9 +18,8 @@ Patch1: ghostscript-multilib.patch
Patch2: ghostscript-scripts.patch
Patch3: ghostscript-noopt.patch
Patch4: ghostscript-fPIC.patch
Patch6: ghostscript-runlibfileifexists.patch
Patch8: ghostscript-system-jasper.patch
Patch9: ghostscript-CVE-2008-0411.patch
Patch5: ghostscript-runlibfileifexists.patch
Patch6: ghostscript-system-jasper.patch
Requires: urw-fonts >= 1.1, ghostscript-fonts
BuildRequires: libjpeg-devel, libXt-devel
@ -89,11 +88,9 @@ rm -rf libpng zlib jpeg jasper
%patch4 -p1 -b .fPIC
# Define .runlibfileifexists.
%patch6 -p1 -b .runlibfileifexists
%patch5 -p1 -b .runlibfileifexists
%patch8 -p1 -b .system-jasper
%patch9 -p1 -b .CVE-2008-0411
%patch6 -p1 -b .system-jasper
# Convert manual pages to UTF-8
from8859_1() {
@ -266,6 +263,9 @@ rm -rf $RPM_BUILD_ROOT
%{_libdir}/libgs.so
%changelog
* Tue Mar 4 2008 Tim Waugh <twaugh@redhat.com> 8.62-2
- No longer need CVE-2008-0411 patch.
* Tue Mar 4 2008 Tim Waugh <twaugh@redhat.com> 8.62-1
- 8.62. No longer need IJS KRGB patch, or patch for gs bug 689577.