93ef6997ae
- Fix CVE-2023-36664: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix). - Fix CVE-2023-38559: A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs. - Fix CVE-2023-38560: An integer overflow flaw was found in pcl/pl/plfont.c:418 in pl_glyph_name in ghostscript. This issue may allow a local attacker to cause a denial of service via transforming a crafted PCL file to PDF format. https://ghostscript.readthedocs.io/en/gs10.02.0/News.html Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
35 lines
1.0 KiB
Diff
35 lines
1.0 KiB
Diff
From 088f3cd6e58cff5fa51e072d1829f7691a5f6681 Mon Sep 17 00:00:00 2001
|
|
From: Fabrice Fontaine <fontaine.fabrice@gmail.com>
|
|
Date: Wed, 20 Sep 2023 13:44:28 +0100
|
|
Subject: [PATCH] Fix build without BUILD_PDF
|
|
|
|
The PDFSetParams PostScript extension operator was missing a stub function definition
|
|
when the PDF interpreter is not built in.
|
|
|
|
Author: Fabrice Fontaine <fontaine.fabrice@gmail.com>
|
|
Upstream: https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=088f3cd6e58cff5fa51e072d1829f7691a5f6681
|
|
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
|
|
---
|
|
psi/zpdfops.c | 5 +++++
|
|
1 file changed, 5 insertions(+)
|
|
|
|
diff --git a/psi/zpdfops.c b/psi/zpdfops.c
|
|
index e7e0a42ee..271687a18 100644
|
|
--- a/psi/zpdfops.c
|
|
+++ b/psi/zpdfops.c
|
|
@@ -1507,6 +1507,11 @@ static int zPDFdrawannots(i_ctx_t *i_ctx_p)
|
|
return_error(gs_error_undefined);
|
|
}
|
|
|
|
+static int zPDFSetParams(i_ctx_t *i_ctx_p)
|
|
+{
|
|
+ return_error(gs_error_undefined);
|
|
+}
|
|
+
|
|
static int zPDFInit(i_ctx_t *i_ctx_p)
|
|
{
|
|
return_error(gs_error_undefined);
|
|
--
|
|
2.34.1
|
|
|