diff --git a/SPECS/ghostscript.spec b/SPECS/ghostscript.spec index 08c079f..6b91718 100644 --- a/SPECS/ghostscript.spec +++ b/SPECS/ghostscript.spec @@ -34,7 +34,7 @@ Name: ghostscript Summary: Interpreter for PostScript language & PDF Version: 9.25 -Release: 2%{?dist}.3 +Release: 5%{?dist} License: AGPLv3+ @@ -253,7 +253,7 @@ autoreconf -fv # NOTE: In RHEL we need to keep the /usr/share/ghostscript/conf.d/ folder # for China's GB18030 official certification: %configure --enable-dynamic --disable-compile-inits --without-versioned-path \ - --with-fontpath="%{urw_base35_fontpath}:%{_datadir}/%{name}/conf.d/:%{_sysconfdir}/%{name}/" \ + --with-fontpath="%{urw_base35_fontpath}:%{_datadir}/%{name}/conf.d/:%{_sysconfdir}/%{name}/:%{_datadir}/fonts" \ --with-install-cups --with-ijs # Build IJS @@ -430,17 +430,18 @@ install -m 0755 -d %{buildroot}%{_sysconfdir}/%{name}/ # ============================================================================= %changelog -* Fri Nov 08 2019 Zdenek Dohnal - 9.25-2.3 -- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys - -* Thu Aug 22 2019 Martin Osvald - 9.25-2.2 -- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445) -- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444) -- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443) -- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450) - -* Mon Aug 05 2019 Martin Osvald - 9.25-2.1 -- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394) +* Tue Mar 31 2020 Zdenek Dohnal - 9.25-5 +- 1812284 - ghostscript fontconfig support broken when gs used with -dSAFER/-dPARANOIDSAFER + +* Fri Nov 08 2019 Zdenek Dohnal - 9.25-4 +- 1769341 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys + +* Mon Aug 05 2019 Martin Osvald - 9.25-3 +- Resolves: #1737339 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394) +- Resolves: #1744009 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445) +- Resolves: #1744013 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444) +- Resolves: #1744004 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443) +- Resolves: #1744229 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450) * Tue Apr 02 2019 Martin Osvald - 9.25-2 - obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel