diff options
| author |   Thomas Deutschmann <whissi@gentoo.org> | 2016-11-23 19:11:51 +0100 |
|---|---|---|
| committer |   Aaron Bauman <bman@gentoo.org> | 2016-11-27 16:14:01 +0900 |
| commit | 4a1d1e520fccdcff5c0ab5e69dfaf6df5abd0ff9 (patch) | |
| tree | bc4a7a09a6ab77b4d46b722cfa12ce0edd978f7c /app-text/a2ps/files | |
| parent | media-libs/t1lib: Security revbump to fix multiple vulnerabilities (bug #358667) (diff) | |
| download | gentoo-4a1d1e520fccdcff5c0ab5e69dfaf6df5abd0ff9.tar.gz gentoo-4a1d1e520fccdcff5c0ab5e69dfaf6df5abd0ff9.tar.bz2 gentoo-4a1d1e520fccdcff5c0ab5e69dfaf6df5abd0ff9.zip | |
app-text/a2ps: Security revbump to fix CVE-2014-0466 (bug #506352)
Patch for CVE-2014-0466 taken from Debian [Link 1].
Link 1: https://sources.debian.net/src/a2ps/1:4.14-1.1%2Bdeb7u1/debian/patches/10_CVE-2014-0466.dpatch/
Gentoo-Bug: https://bugs.gentoo.org/506352
Package-Manager: portage-2.3.2
Closes: https://github.com/gentoo/gentoo/pull/2898
Signed-off-by: Aaron Bauman <bman@gentoo.org>
Diffstat (limited to 'app-text/a2ps/files')
| -rw-r--r-- | app-text/a2ps/files/a2ps-4.14-CVE-2014-0466.patch | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/app-text/a2ps/files/a2ps-4.14-CVE-2014-0466.patch b/app-text/a2ps/files/a2ps-4.14-CVE-2014-0466.patch new file mode 100644 index 000000000000..56f0b2f527a2 --- /dev/null +++ b/app-text/a2ps/files/a2ps-4.14-CVE-2014-0466.patch @@ -0,0 +1,32 @@ +CVE-2014-0466: fixps does not invoke gs with -dSAFER + +A malicious PostScript file could delete files with the privileges of +the invoking user. + +Author: Salvatore Bonaccorso <carnil@debian.org> +Origin: https://bugs.debian.org/742902 + +diff -urNad '--exclude=CVS' '--exclude=.svn' '--exclude=.git' '--exclude=.arch' '--exclude=.hg' '--exclude=_darcs' '--exclude=.bzr' a2ps~/contrib/fixps.in a2ps/contrib/fixps.in +--- a2ps~/contrib/fixps.in 2014-03-30 12:24:50.000000000 +0200 ++++ a2ps/contrib/fixps.in 2014-03-30 12:40:36.763249218 +0200 +@@ -389,7 +389,7 @@ + eval "$command" ;; + gs) + $verbose "$program: making a full rewrite of the file ($gs)." >&2 +- $gs -q -dNOPAUSE -dBATCH -sDEVICE=pswrite -sOutputFile=- -c save pop -f $file ;; ++ $gs -q -dSAFER -dNOPAUSE -dBATCH -sDEVICE=pswrite -sOutputFile=- -c save pop -f $file ;; + esac + ) + fi +diff -urNad '--exclude=CVS' '--exclude=.svn' '--exclude=.git' '--exclude=.arch' '--exclude=.hg' '--exclude=_darcs' '--exclude=.bzr' a2ps~/contrib/fixps.m4 a2ps/contrib/fixps.m4 +--- a2ps~/contrib/fixps.m4 2014-03-30 12:24:50.000000000 +0200 ++++ a2ps/contrib/fixps.m4 2014-03-30 12:40:36.767249254 +0200 +@@ -307,7 +307,7 @@ + eval "$command" ;; + gs) + $verbose "$program: making a full rewrite of the file ($gs)." >&2 +- $gs -q -dNOPAUSE -dBATCH -sDEVICE=pswrite -sOutputFile=- -c save pop -f $file ;; ++ $gs -q -dSAFER -dNOPAUSE -dBATCH -sDEVICE=pswrite -sOutputFile=- -c save pop -f $file ;; + esac + ) + fi |