Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[r19.03] ghostscript: catch up with many CVE patches #75121

Closed
wants to merge 5 commits into from
Closed

[r19.03] ghostscript: catch up with many CVE patches #75121

wants to merge 5 commits into from

Commits on Dec 5, 2019

  1. ghostscript: add patches for CVE-2019-3839 

    (cherry picked from commit f55969b)
    @risicle
    risicle committed Dec 5, 2019
    Copy the full SHA
    1002698 View commit details
    Browse the repository at this point in the history

  2. ghostscript: add patches for CVE-2019-10216, CVE-2019-14811, CVE-2019… 

    …-14812, CVE-2019-14813 and some of CVE-2019-14817

as with master, not all of the CVE-2019-14817 patch applies cleanly, but
the parts that do should provide some protection

(cherry picked from commit bd3f644)
    @risicle
    risicle committed Dec 5, 2019
    Copy the full SHA
    11d5be3 View commit details
    Browse the repository at this point in the history

  3. ghostscript: add patches for CVE-2019-3835 

    context-adjusted patches cribbed from debian's 9.26a~dfsg-0+deb9u6, also
requiring further adjustment of patch for CVE-2019-10216

(cherry picked from commit 59ea6fc)
    @risicle
    risicle committed Dec 5, 2019
    Copy the full SHA
    f0f8636 View commit details
    Browse the repository at this point in the history

  4. ghostscript: add patches for CVE-2019-3838 

    again, context-adjusted patches cribbed from debian's 9.26a~dfsg-0+deb9u6

(cherry picked from commit 4e28989)
    @risicle
    risicle committed Dec 5, 2019
    Copy the full SHA
    39d05b1 View commit details
    Browse the repository at this point in the history

  5. ghostscript: add patch for CVE-2019-14869 

    again, context-adjusted patch cribbed from debian's 9.26a~dfsg-0+deb9u6

(cherry picked from commit 0fba5b9)
    @risicle
    risicle committed Dec 5, 2019
    Copy the full SHA
    10e0904 View commit details
    Browse the repository at this point in the history