~ubuntu-branches/ubuntu/hardy/ghostscript/hardy-updates

Viewing all changes in revision 26.

  • Committer: Bazaar Package Importer
  • Author(s): Marc Deslauriers
  • Date: 2010-07-12 12:33:50 UTC
  • Revision ID: james.westby@ubuntu.com-20100712123350-mu6035kl907pxidf
Tags: 8.61.dfsg.1-1ubuntu3.3
* SECURITY UPDATE: arbitrary code execution via unlimited recursive
  procedure invocations (LP: #546009)
  - debian/patches/CVE-2010-1628.dpatch: only initialize structures if
    all allocations were successful in src/ialloc.c, src/idosave.h,
    src/isave.c.
  - CVE-2010-1628
* SECURITY UPDATE: arbitrary code execution via crafted PostScript file
  (LP: #546009)
  - debian/patches/CVE-2010-1869.dpatch: use correct buffer sizes in
    src/int.mak, src/iscan.c, src/iscan.h.
  - CVE-2010-1869
* SECURITY UPDATE: arbitrary code execution via long names
  - debian/patches/security-long-names.dpatch: check against maximum size
    in psi/iscan.c.
  - No CVE number yet.

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: