Fabrice Fontaine 93ef6997ae package/ghostscript: security bump to version 10.02.0 ... - Fix CVE-2023-36664: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix). - Fix CVE-2023-38559: A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs. - Fix CVE-2023-38560: An integer overflow flaw was found in pcl/pl/plfont.c:418 in pl_glyph_name in ghostscript. This issue may allow a local attacker to cause a denial of service via transforming a crafted PCL file to PDF format. https://ghostscript.readthedocs.io/en/gs10.02.0/News.html Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>		2023-09-20 19:32:29 +02:00
..
0001-Fix-build-without-BUILD_PDF.patch	package/ghostscript: security bump to version 10.02.0	2023-09-20 19:32:29 +02:00
Config.in
ghostscript.hash	package/ghostscript: security bump to version 10.02.0	2023-09-20 19:32:29 +02:00
ghostscript.mk	package/ghostscript: security bump to version 10.02.0	2023-09-20 19:32:29 +02:00