[Bug 1007816] New: ghostscript regression with patch for CVE-2013-5653
http://bugzilla.opensuse.org/show_bug.cgi?id=1007816 Bug ID: 1007816 Summary: ghostscript regression with patch for CVE-2013-5653 Classification: openSUSE Product: openSUSE Distribution Version: 13.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening@forge.provo.novell.com Reporter: alarrosa@suse.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Albert Astals, okular's author, pointed me to https://bugs.kde.org/show_bug.cgi?id=371887 . After the last ghostscript update in openSUSE 13.2, okular can no longer open .ps files . I narrowed it down to patch CVE-2013-5653.patch ( https://build.opensuse.org/package/view_file/openSUSE:13.2:Update/ghostscrip... ) introduced in maintenance update ghostscript.5742 . To narrow it even more, if I remove the lines that patch adds to gs_init.ps from /usr/share/ghostscript/9.15/Resource/Init/gs_init.ps then okular works again. (that is, the two occurences of "systemdict /getenv {pop //false} put") In any case, that goes beyond my knowledge of ghostscript, so I think it's better someone else takes a look at this. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1007816 Antonio Larrosa <alarrosa@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jsmeix@suse.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1007816 http://bugzilla.opensuse.org/show_bug.cgi?id=1007816#c1 --- Comment #1 from Antonio Larrosa <alarrosa@suse.com> --- Btw, I just checked that TW is not affected, but Leap 42.2 is, and that means SLE is most probably affected too. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1007816 http://bugzilla.opensuse.org/show_bug.cgi?id=1007816#c2 Wolfgang Bauer <wbauer@tmo.at> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |wbauer@tmo.at --- Comment #2 from Wolfgang Bauer <wbauer@tmo.at> --- See bug#1006592 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1007816 http://bugzilla.opensuse.org/show_bug.cgi?id=1007816#c3 --- Comment #3 from Wolfgang Bauer <wbauer@tmo.at> --- This fixes it: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=99e331527d541a8f01... -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1007816 http://bugzilla.opensuse.org/show_bug.cgi?id=1007816#c4 Antonio Larrosa <alarrosa@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |DUPLICATE --- Comment #4 from Antonio Larrosa <alarrosa@suse.com> --- Thanks Wolfgang, I didn't notice the bugreport you already worked on. I'll mark this as duplicate of yours. *** This bug has been marked as a duplicate of bug 1006592 *** -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com