diff --git a/backport-CVE-2023-46751.patch b/backport-CVE-2023-46751.patch new file mode 100644 index 0000000000000000000000000000000000000000..53ca3dcfc22de2e72be340e989bc986e658256e9 --- /dev/null +++ b/backport-CVE-2023-46751.patch @@ -0,0 +1,30 @@ +From 5d2da96e81c7455338302c71a291088a8396245a Mon Sep 17 00:00:00 2001 +From: Chris Liddell +Date: Mon, 16 Oct 2023 16:49:40 +0100 +Subject: [PATCH] Bug 707264: Fix tiffsep(1) requirement for seekable output + files + +In the device initialization redesign, tiffsep and tiffsep1 lost the requirement +for the output files to be seekable. + +Fixing that highlighted a problem with the error handling in +gdev_prn_open_printer_seekable() where closing the erroring file would leave a +dangling pointer, and lead to a crash. +--- + base/gdevprn.c | 1 + + devices/gdevtsep.c | 1 + + 2 files changed, 2 insertions(+) + +diff --git a/base/gdevprn.c b/base/gdevprn.c +index 0491a3c6c..033632387 100644 +--- a/base/gdevprn.c ++++ b/base/gdevprn.c +@@ -1271,6 +1271,7 @@ gdev_prn_open_printer_seekable(gx_device *pdev, bool binary_mode, + && !IS_LIBCTX_STDERR(pdev->memory, gp_get_file(ppdev->file))) { + + code = gx_device_close_output_file(pdev, ppdev->fname, ppdev->file); ++ ppdev->file = NULL; + if (code < 0) + return code; + } +2.34.1 \ No newline at end of file diff --git a/ghostscript.spec b/ghostscript.spec index 680d3271046d91e6ebd25a3944b95eb44a0ced9c..bf90da9a3844bc26fe16a560e5acf874a510f191 100644 --- a/ghostscript.spec +++ b/ghostscript.spec @@ -9,7 +9,7 @@ Name: ghostscript Version: 9.52 -Release: 9 +Release: 10 Summary: An interpreter for PostScript and PDF files License: AGPLv3+ URL: https://ghostscript.com/ @@ -52,6 +52,7 @@ Patch33: backport-CVE-2021-3781-BUg-704342-Include-device-specifier-strings-in-a Patch34: CVE-2023-38559.patch Patch35: CVE-2023-28879.patch Patch36: CVE-2023-36664.patch +Patch37: backport-CVE-2023-46751.patch BuildRequires: automake gcc BuildRequires: adobe-mappings-cmap-devel adobe-mappings-pdf-devel @@ -212,6 +213,11 @@ make check %{_bindir}/dvipdf %changelog +* Mon Dec 25 2023 liningjie - 9.52-10 +- Type:CVE +- ID:CVE-2023-46751 +- SUG:NA + * Wed Sep 6 2023 liningjie - 9.52-9 - Type:CVE - ID:CVE-2023-36664