diff options
| author |   Steve Sakoman <steve@sakoman.com> | 2022-03-25 07:11:50 -1000 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2022-03-26 16:25:24 -1000 |
| commit | da9b7b8973913c80c989aee1f5b34c98362725a8 (patch) | |
| tree | 96b2646910b3dc731ddf66bea619269845c097a2 | |
| parent | 2c58d4691b07230616272f2727e0ad0a345064be (diff) | |
| download | openembedded-core-contrib-da9b7b8973913c80c989aee1f5b34c98362725a8.tar.gz | |
ghostscript: fix CVE-2020-15900 and CVE-2021-45949 for -native
CVE patches (and the stack limits check patch) should have been
added to SRC_URI_BASE so that they are applied for both target
and -native packages.
Signed-off-by: Steve Sakoman <steve@sakoman.com>
| -rw-r--r-- | meta/recipes-extended/ghostscript/ghostscript_9.52.bb | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/meta/recipes-extended/ghostscript/ghostscript_9.52.bb b/meta/recipes-extended/ghostscript/ghostscript_9.52.bb index ac3d0dca43..310c4f6d24 100644 --- a/meta/recipes-extended/ghostscript/ghostscript_9.52.bb +++ b/meta/recipes-extended/ghostscript/ghostscript_9.52.bb @@ -33,14 +33,14 @@ SRC_URI_BASE = "https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/d file://do-not-check-local-libpng-source.patch \ file://avoid-host-contamination.patch \ file://mkdir-p.patch \ + file://CVE-2020-15900.patch \ + file://check-stack-limits-after-function-evalution.patch \ + file://CVE-2021-45949.patch \ " SRC_URI = "${SRC_URI_BASE} \ file://ghostscript-9.21-prevent_recompiling.patch \ file://cups-no-gcrypt.patch \ - file://CVE-2020-15900.patch \ - file://check-stack-limits-after-function-evalution.patch \ - file://CVE-2021-45949.patch \ " SRC_URI_class-native = "${SRC_URI_BASE} \ |