cvs commit: ports/print/ghostscript-afpl Makefile.inc ports/print/ghostscript-afpl/files patch-lib:ps2epsi.CAN-2004-0967 patch-lib:pv.sh.CAN-2004-0967 ports/print/ghostscript-gnu Makefile.inc ports/print/ghostscript-gnu/files patch-lib:pj-gs.sh.CAN-2004-0967 patch-lib:ps2epsi.CAN-2004-0967 patch-lib:pv.sh.CAN-2004-0967 patch-lib:sysvlp.sh.CAN-2004-0967 ...

[Hiroki Sato]

hrs         2005-11-27 17:57:19 UTC

  FreeBSD ports repository

  Modified files:
    print/ghostscript-afpl Makefile.inc 
    print/ghostscript-gnu Makefile.inc 
    security/vuxml       vuln.xml 
  Added files:
    print/ghostscript-afpl/files patch-lib:ps2epsi.CAN-2004-0967 
                                 patch-lib:pv.sh.CAN-2004-0967 
    print/ghostscript-gnu/files patch-lib:pj-gs.sh.CAN-2004-0967 
                                patch-lib:ps2epsi.CAN-2004-0967 
                                patch-lib:pv.sh.CAN-2004-0967 
                                patch-lib:sysvlp.sh.CAN-2004-0967 
  Log:
  Security fix: several shell scripts included in the Ghostscript package
  allow local users to overwrite files via a symlink attack on temporary
  files.
  
  Security: CAN-2004-0967
  
  Revision  Changes    Path
  1.20      +2 -2      ports/print/ghostscript-afpl/Makefile.inc
  1.1       +12 -0     ports/print/ghostscript-afpl/files/patch-lib:ps2epsi.CAN-2004-0967 (new)
  1.1       +16 -0     ports/print/ghostscript-afpl/files/patch-lib:pv.sh.CAN-2004-0967 (new)
  1.8       +2 -2      ports/print/ghostscript-gnu/Makefile.inc
  1.1       +40 -0     ports/print/ghostscript-gnu/files/patch-lib:pj-gs.sh.CAN-2004-0967 (new)
  1.1       +12 -0     ports/print/ghostscript-gnu/files/patch-lib:ps2epsi.CAN-2004-0967 (new)
  1.1       +16 -0     ports/print/ghostscript-gnu/files/patch-lib:pv.sh.CAN-2004-0967 (new)
  1.1       +29 -0     ports/print/ghostscript-gnu/files/patch-lib:sysvlp.sh.CAN-2004-0967 (new)
  1.894     +41 -1     ports/security/vuxml/vuln.xml