rpms/ghostscript
7
0
Fork 0
Code Issues Pull Requests Releases Activity

- No longer need CVE-2008-0411 patch.

Browse Source
This commit is contained in:
Tim Waugh 2008-03-04 17:44:54 +00:00
parent 22dff3b597
commit 05c0279c51
2 changed files with 3 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
ghostscript-CVE-2008-0411.patch
View File

@ -1,13 +0,0 @@
diff -up ghostscript-8.61/src/zicc.c.CVE-2008-0411 ghostscript-8.61/src/zicc.c
--- ghostscript-8.61/src/zicc.c.CVE-2008-0411 2007-09-25 14:31:24.000000000 +0100
+++ ghostscript-8.61/src/zicc.c 2008-02-27 17:07:30.000000000 +0000
@@ -77,6 +77,9 @@ zseticcspace(i_ctx_t * i_ctx_p)
dict_find_string(op, "N", &pnval);
ncomps = pnval->value.intval;
+ if (2*ncomps > sizeof(range_buff)/sizeof(float))
+ return_error(e_rangecheck);
+
/* verify the DataSource entry */
if (dict_find_string(op, "DataSource", &pstrmval) <= 0)
return_error(e_undefined);

6
ghostscript.spec
View File

@ -20,7 +20,6 @@ Patch3: ghostscript-noopt.patch
Patch4: ghostscript-fPIC.patch
Patch5: ghostscript-runlibfileifexists.patch
Patch6: ghostscript-system-jasper.patch
Patch7: ghostscript-CVE-2008-0411.patch
Requires: urw-fonts >= 1.1, ghostscript-fonts
BuildRequires: libjpeg-devel, libXt-devel
@ -93,8 +92,6 @@ rm -rf libpng zlib jpeg jasper
%patch6 -p1 -b .system-jasper
%patch7 -p1 -b .CVE-2008-0411
# Convert manual pages to UTF-8
from8859_1() {
iconv -f iso-8859-1 -t utf-8 < "$1" > "${1}_"
@ -265,6 +262,9 @@ rm -rf $RPM_BUILD_ROOT
%{_libdir}/libgs.so
%changelog
* Tue Mar 4 2008 Tim Waugh <twaugh@redhat.com> 8.62-2
- No longer need CVE-2008-0411 patch.
* Tue Mar 4 2008 Tim Waugh <twaugh@redhat.com> 8.62-1
- 8.62. No longer need IJS KRGB patch, or patch for gs bug 689577.