hrs 2005-11-27 17:57:19 UTC
FreeBSD ports repository
Modified files:
print/ghostscript-afpl Makefile.inc
print/ghostscript-gnu Makefile.inc
security/vuxml vuln.xml
Added files:
print/ghostscript-afpl/files patch-lib:ps2epsi.CAN-2004-0967
patch-lib:pv.sh.CAN-2004-0967
print/ghostscript-gnu/files patch-lib:pj-gs.sh.CAN-2004-0967
patch-lib:ps2epsi.CAN-2004-0967
patch-lib:pv.sh.CAN-2004-0967
patch-lib:sysvlp.sh.CAN-2004-0967
Log:
Security fix: several shell scripts included in the Ghostscript package
allow local users to overwrite files via a symlink attack on temporary
files.
Security: CAN-2004-0967
Revision Changes Path
1.20 +2 -2 ports/print/ghostscript-afpl/Makefile.inc
1.1 +12 -0
ports/print/ghostscript-afpl/files/patch-lib:ps2epsi.CAN-2004-0967 (new)
1.1 +16 -0
ports/print/ghostscript-afpl/files/patch-lib:pv.sh.CAN-2004-0967 (new)
1.8 +2 -2 ports/print/ghostscript-gnu/Makefile.inc
1.1 +40 -0
ports/print/ghostscript-gnu/files/patch-lib:pj-gs.sh.CAN-2004-0967 (new)
1.1 +12 -0
ports/print/ghostscript-gnu/files/patch-lib:ps2epsi.CAN-2004-0967 (new)
1.1 +16 -0
ports/print/ghostscript-gnu/files/patch-lib:pv.sh.CAN-2004-0967 (new)
1.1 +29 -0
ports/print/ghostscript-gnu/files/patch-lib:sysvlp.sh.CAN-2004-0967 (new)
1.894 +41 -1 ports/security/vuxml/vuln.xml
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
