GNU gv - Bugs: bug #12156, -dSAFER security fix
You are not allowed to post comments on this tracker with your current authentication level.
bug #12156: -dSAFER security fix
Submitter: | None | ||
Submitted: | Sat 26 Feb 2005 11:34:23 PM UTC | ||
Category: | PDF rendering | Severity: | 3 - Normal |
Item Group: | None | Status: | Fixed |
Privacy: | Public | Assigned to: | jemarch |
Open/Closed: | Closed | Release: | None |
Attached Files
file #2620: gv-3.6.1-gs8.patch added by None (3KiB - application/octet-stream)
Depends on the following items: None found
Items that depend on this one: None found
CC list is empty
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 4 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2005-03-31 | jemarch | Status | None | Fixed | |
Assigned to | None | jemarch | |||
Open/Closed | Open | Closed | |||
2005-02-26 | None | Attached File | - | Added gv-3.6.1-gs8.patch, #2242 |
Powered by Savane 3.13-02a9.
Corresponding source code
The gv-3.6.1 hack to make pdf files work with gs-8.00 (and later) introduces a security hole: it effectively circumvents the whole point of the -dSAFER option!
The right way to fix this is illustrated in the attached patch (which also reverts the current hack).