Changeset f429481

Timestamp:

09/10/2021 09:47:52 PM (3 years ago)

Author:

Ken Moffat <ken@…>

Branches:

11.1, 11.2, 11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

8d3c348

Parents:

eb448ba

Message:

ghostscript - patch it to fix CVE-2021-3781.

Files:

• introduction/welcome/changelog.xml (modified) (1 diff)
• pst/printing/gs.xml (modified) (2 diffs)

introduction/welcome/changelog.xml

@@ -45 +45 @@
       <para>September 10th, 2021</para>
       <itemizedlist>
+        <listitem>
+          <para>[ken] - Patch ghostscript for CVE-2021-3781 0-day
+          (security update re libgs). Thanks to Doug for helping me
+          understand the public PoC. Fixes
+          <ulink url="&blfs-ticket-root;15517">#15517</ulink>.</para>
+        </listitem>
         <listitem>
           <para>[renodr] - Update to libseccomp-2.5.2. Fixes

pst/printing/gs.xml

@@ -91 +91 @@
         <para>
           Required patch:
-          <ulink url="&patch-root;/ghostscript-&gs-version;-upstream_fix-1.patch"/>
+          <ulink url="&patch-root;/ghostscript-&gs-version;-upstream_fix-2.patch"/>
         </para>
       </listitem>
@@ -200 +200 @@
 
     <para>
-      Apply a patch to prevent a segfault when processing some PDF files:
-    </para>
-
-<screen><userinput remap="pre">patch -Np1 -i ../ghostscript-&gs-version;-upstream_fix-1.patch</userinput></screen>
+      Apply a patch to prevent a segfault when processing some PDF files and
+      to fix a public 0-day in libgs which can be exploited via ImageMagick:
+    </para>
+
+<screen><userinput remap="pre">patch -Np1 -i ../ghostscript-&gs-version;-upstream_fix-2.patch</userinput></screen>
 
     <para>