aboutsummaryrefslogtreecommitdiffstats
path: root/main/ghostscript/APKBUILD
diff options
context:
space:
mode:
authorFrancesco Colista <fcolista@alpinelinux.org>2017-05-30 06:51:08 +0000
committerFrancesco Colista <fcolista@alpinelinux.org>2017-05-30 12:18:35 +0000
commit0d31fbd835bf00e76c6af48139c8f30e9ee0d095 (patch)
treefd0048a2053d2970312ce40224d9229ea981ffc3 /main/ghostscript/APKBUILD
parente88b188c74342100d25b8824eaa97c40dd9d2ac8 (diff)
downloadaports-0d31fbd835bf00e76c6af48139c8f30e9ee0d095.tar.bz2
aports-0d31fbd835bf00e76c6af48139c8f30e9ee0d095.tar.xz
main/ghostscript: security fixes (fix CVE-2017-5951, CVE-2017-7207). Fixes #7309
Diffstat (limited to 'main/ghostscript/APKBUILD')
-rw-r--r--main/ghostscript/APKBUILD11
1 files changed, 9 insertions, 2 deletions
diff --git a/main/ghostscript/APKBUILD b/main/ghostscript/APKBUILD
index 697f2ffc73..0515ffe9e2 100644
--- a/main/ghostscript/APKBUILD
+++ b/main/ghostscript/APKBUILD
@@ -2,7 +2,7 @@
# Maintainer: Cameron Banta <cbanta@gmail.com>
pkgname=ghostscript
pkgver=9.21
-pkgrel=2
+pkgrel=3
pkgdesc="An interpreter for the PostScript language and for PDF"
url="http://ghostscript.com/"
arch="all"
@@ -16,12 +16,17 @@ source="https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/
fix-sprintf.patch
fix-alignment.patch
CVE-2017-8291.patch
+ CVE-2017-7207.patch
+ CVE-2017-5951.patch
"
builddir="$srcdir/$pkgname-$pkgver"
# secfixes:
# 9.21-r2:
# - CVE-2017-8291
+# 9.21-r3:
+# - CVE-2017-7207
+# - CVE-2017-5951
prepare() {
cd "$builddir"
@@ -116,4 +121,6 @@ sha512sums="c5ff632dc9b418ebeecaae796cecbaf9ffcb84d7a1b62c1af2e6c9082f7b9f24fe9d
70721e3a335afa5e21d4e6cf919119010bd4544a03ab8f53f5325c173902221ad9b88c118b4bfeee80b3e1956bcdbaf4c53f64ae7fb81f5ba57dbc956750c482 ghostscript-system-zlib.patch
beefcf395f7f828e1b81c088022c08a506e218f27535b9de01e0f0edf7979b435316c318fa676771630f6ad16ff1ab059cd68aa128ed97e5a9f2f3fa840200c4 fix-sprintf.patch
7c6f40217dc687df27ee6d33351fba12a737c2ae06d1c35208dc943776d8efa66c3e882f0b1b9aec566fad69fd28ce360cc243f1c1aa20834467e769889194f2 fix-alignment.patch
-c17121e564dd26033508199f3e587bfcee5589fec6e45e822c79f648c3a3b70363f04ad33538070c4d24c96e5795b277345359b66d2f360b996fca77239102b5 CVE-2017-8291.patch"
+c17121e564dd26033508199f3e587bfcee5589fec6e45e822c79f648c3a3b70363f04ad33538070c4d24c96e5795b277345359b66d2f360b996fca77239102b5 CVE-2017-8291.patch
+11ece0df5d5d5ae6d654033c42531a82db57a92aed462659d177e18234cf6d61719625368eb4448a2235bca9d6b3901696b30099642c57df57966def5850da9d CVE-2017-7207.patch
+252d826bdf1e22c372312589e9b19067332c432eae748f2eb644bf32384925e8095ea7c218ca7bbf04bf384db42cca6b418cb6622a74d411da446776490516d8 CVE-2017-5951.patch"