|
Bernhard M. Wiedemann |
7eefe3 |
Description: CVE-2014-0466: fixps does not invoke gs with -dSAFER
|
|
Bernhard M. Wiedemann |
7eefe3 |
A malicious PostScript file could delete files with the privileges of
|
|
Bernhard M. Wiedemann |
7eefe3 |
the invoking user.
|
|
Bernhard M. Wiedemann |
7eefe3 |
Origin: vendor
|
|
Bernhard M. Wiedemann |
7eefe3 |
Bug-Debian: http://bugs.debian.org/742902
|
|
Bernhard M. Wiedemann |
7eefe3 |
Author: Salvatore Bonaccorso <carnil@debian.org>
|
|
Bernhard M. Wiedemann |
7eefe3 |
Last-Update: 2014-03-28
|
|
Bernhard M. Wiedemann |
7eefe3 |
|
|
Bernhard M. Wiedemann |
7eefe3 |
diff -rupN a2ps-4.14.old/contrib/fixps.in a2ps-4.14/contrib/fixps.in
|
|
Bernhard M. Wiedemann |
7eefe3 |
--- a2ps-4.14.old/contrib/fixps.in 2007-12-28 19:29:01.000000000 -0800
|
|
Bernhard M. Wiedemann |
7eefe3 |
+++ a2ps-4.14/contrib/fixps.in 2014-08-06 21:11:17.114518845 -0700
|
|
Bernhard M. Wiedemann |
7eefe3 |
@@ -389,7 +389,7 @@ if test $task != check; then
|
|
Bernhard M. Wiedemann |
7eefe3 |
eval "$command" ;;
|
|
Bernhard M. Wiedemann |
7eefe3 |
gs)
|
|
Bernhard M. Wiedemann |
7eefe3 |
$verbose "$program: making a full rewrite of the file ($gs)." >&2
|
|
Bernhard M. Wiedemann |
7eefe3 |
- $gs -q -dNOPAUSE -dBATCH -sDEVICE=pswrite -sOutputFile=- -c save pop -f $file ;;
|
|
Bernhard M. Wiedemann |
7eefe3 |
+ $gs -q -dSAFER -dNOPAUSE -dBATCH -sDEVICE=pswrite -sOutputFile=- -c save pop -f $file ;;
|
|
Bernhard M. Wiedemann |
7eefe3 |
esac
|
|
Bernhard M. Wiedemann |
7eefe3 |
)
|
|
Bernhard M. Wiedemann |
7eefe3 |
fi
|
|
Bernhard M. Wiedemann |
7eefe3 |
diff -rupN a2ps-4.14.old/contrib/fixps.m4 a2ps-4.14/contrib/fixps.m4
|
|
Bernhard M. Wiedemann |
7eefe3 |
--- a2ps-4.14.old/contrib/fixps.m4 2007-12-28 18:11:47.000000000 -0800
|
|
Bernhard M. Wiedemann |
7eefe3 |
+++ a2ps-4.14/contrib/fixps.m4 2014-08-06 21:11:40.529942880 -0700
|
|
Bernhard M. Wiedemann |
7eefe3 |
@@ -307,7 +307,7 @@ if test $task != check; then
|
|
Bernhard M. Wiedemann |
7eefe3 |
eval "$command" ;;
|
|
Bernhard M. Wiedemann |
7eefe3 |
gs)
|
|
Bernhard M. Wiedemann |
7eefe3 |
$verbose "$program: making a full rewrite of the file ($gs)." >&2
|
|
Bernhard M. Wiedemann |
7eefe3 |
- $gs -q -dNOPAUSE -dBATCH -sDEVICE=pswrite -sOutputFile=- -c save pop -f $file ;;
|
|
Bernhard M. Wiedemann |
7eefe3 |
+ $gs -q -dSAFER -dNOPAUSE -dBATCH -sDEVICE=pswrite -sOutputFile=- -c save pop -f $file ;;
|
|
Bernhard M. Wiedemann |
7eefe3 |
esac
|
|
Bernhard M. Wiedemann |
7eefe3 |
)
|
|
Bernhard M. Wiedemann |
7eefe3 |
fi
|