summaryrefslogtreecommitdiff
path: root/gnu
diff options
context:
space:
mode:
authorVincent Legoll <vincent.legoll@gmail.com>2021-02-20 22:10:09 +0100
committerLeo Famulari <leo@famulari.name>2021-02-20 17:38:26 -0500
commitf49c13f1833f0db5a5ddcb751c16f6e9ed56355f (patch)
tree8458a434e3fc320ac53379e91211bd66f93e84ad /gnu
parent6579100df09aa906dd3f38aaafa2e22adcf5f991 (diff)
gnu: ghostscript: Update to 9.53.3.
* gnu/packages/ghostscript.scm (ghostscript): Update to 9.53.3. [source]: Remove obsolete patch 'ghostscript-CVE-2020-15900.patch'. * gnu/packages/patches/ghostscript-CVE-2020-15900.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it. Signed-off-by: Leo Famulari <leo@famulari.name>
Diffstat (limited to 'gnu')
-rw-r--r--gnu/local.mk1
-rw-r--r--gnu/packages/ghostscript.scm5
-rw-r--r--gnu/packages/patches/ghostscript-CVE-2020-15900.patch36
3 files changed, 2 insertions, 40 deletions
diff --git a/gnu/local.mk b/gnu/local.mk
index b9757fe69eb..3caa6c6fc98 100644
--- a/gnu/local.mk
+++ b/gnu/local.mk
@@ -1061,7 +1061,6 @@ dist_patch_DATA = \
1061 %D%/packages/patches/ghc-monad-par-fix-tests.patch \ 1061 %D%/packages/patches/ghc-monad-par-fix-tests.patch \
1062 %D%/packages/patches/ghc-pandoc-fix-html-tests.patch \ 1062 %D%/packages/patches/ghc-pandoc-fix-html-tests.patch \
1063 %D%/packages/patches/ghc-pandoc-fix-latex-test.patch \ 1063 %D%/packages/patches/ghc-pandoc-fix-latex-test.patch \
1064 %D%/packages/patches/ghostscript-CVE-2020-15900.patch \
1065 %D%/packages/patches/ghostscript-freetype-compat.patch \ 1064 %D%/packages/patches/ghostscript-freetype-compat.patch \
1066 %D%/packages/patches/ghostscript-no-header-id.patch \ 1065 %D%/packages/patches/ghostscript-no-header-id.patch \
1067 %D%/packages/patches/ghostscript-no-header-uuid.patch \ 1066 %D%/packages/patches/ghostscript-no-header-uuid.patch \
diff --git a/gnu/packages/ghostscript.scm b/gnu/packages/ghostscript.scm
index 19430d315a1..2a13cbd83f6 100644
--- a/gnu/packages/ghostscript.scm
+++ b/gnu/packages/ghostscript.scm
@@ -160,7 +160,7 @@ printing, and psresize, for adjusting page sizes.")
160(define-public ghostscript 160(define-public ghostscript
161 (package 161 (package
162 (name "ghostscript") 162 (name "ghostscript")
163 (version "9.52") 163 (version "9.53.3")
164 (source 164 (source
165 (origin 165 (origin
166 (method url-fetch) 166 (method url-fetch)
@@ -170,9 +170,8 @@ printing, and psresize, for adjusting page sizes.")
170 "/ghostscript-" version ".tar.xz")) 170 "/ghostscript-" version ".tar.xz"))
171 (sha256 171 (sha256
172 (base32 172 (base32
173 "0z1w42y2jmcpl2m1l3z0sfii6zmvzcwcgzn6bydklia6ig7jli2p")) 173 "0d52w9ajv1rz533119ywgmkzkapp74riwny0d21v0zkcbg45p7ww"))
174 (patches (search-patches "ghostscript-freetype-compat.patch" 174 (patches (search-patches "ghostscript-freetype-compat.patch"
175 "ghostscript-CVE-2020-15900.patch"
176 "ghostscript-no-header-creationdate.patch" 175 "ghostscript-no-header-creationdate.patch"
177 "ghostscript-no-header-id.patch" 176 "ghostscript-no-header-id.patch"
178 "ghostscript-no-header-uuid.patch")) 177 "ghostscript-no-header-uuid.patch"))
diff --git a/gnu/packages/patches/ghostscript-CVE-2020-15900.patch b/gnu/packages/patches/ghostscript-CVE-2020-15900.patch
deleted file mode 100644
index b6658d7c7f6..00000000000
--- a/gnu/packages/patches/ghostscript-CVE-2020-15900.patch
+++ /dev/null
@@ -1,36 +0,0 @@
1Fix CVE-2020-15900.
2
3https://cve.circl.lu/cve/CVE-2020-15900
4https://artifex.com/security-advisories/CVE-2020-15900
5
6Taken from upstream:
7https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=5d499272b95a6b890a1397e11d20937de000d31b
8
9diff --git a/psi/zstring.c b/psi/zstring.c
10--- a/psi/zstring.c
11+++ b/psi/zstring.c
12@@ -142,13 +142,18 @@ search_impl(i_ctx_t *i_ctx_p, bool forward)
13 return 0;
14 found:
15 op->tas.type_attrs = op1->tas.type_attrs;
16- op->value.bytes = ptr;
17- r_set_size(op, size);
18+ op->value.bytes = ptr; /* match */
19+ op->tas.rsize = size; /* match */
20 push(2);
21- op[-1] = *op1;
22- r_set_size(op - 1, ptr - op[-1].value.bytes);
23- op1->value.bytes = ptr + size;
24- r_set_size(op1, count + (!forward ? (size - 1) : 0));
25+ op[-1] = *op1; /* pre */
26+ op[-3].value.bytes = ptr + size; /* post */
27+ if (forward) {
28+ op[-1].tas.rsize = ptr - op[-1].value.bytes; /* pre */
29+ op[-3].tas.rsize = count; /* post */
30+ } else {
31+ op[-1].tas.rsize = count; /* pre */
32+ op[-3].tas.rsize -= count + size; /* post */
33+ }
34 make_true(op);
35 return 0;
36 }