New commits:
commit 1fbc63fdddb9949321d064aedd9b7fe638e6eec6
Author: Pavel Vinogradov <public AT sourcemage.org>
Commit: Pavel Vinogradov <public AT sourcemage.org>
diff --git a/printer/ghostscript/patches/0001-cve-2019-10216.patch
b/printer/ghostscript/patches/0001-cve-2019-10216.patch
new file mode 100644
index 0000000..5349f5f
--- /dev/null
+++ b/printer/ghostscript/patches/0001-cve-2019-10216.patch
@@ -0,0 +1,47 @@
+From 5b85ddd19a8420a1bd2d5529325be35d78e94234 Mon Sep 17 00:00:00 2001
+From: Chris Liddell <chris.liddell AT artifex.com>
+Date: Fri, 2 Aug 2019 15:18:26 +0100
+Subject: [PATCH] Bug 701394: protect use of .forceput with executeonly
+
+---
+ Resource/Init/gs_type1.ps | 14 +++++++-------
+ 1 file changed, 7 insertions(+), 7 deletions(-)
+
+diff --git a/Resource/Init/gs_type1.ps b/Resource/Init/gs_type1.ps
+index 6c7735b..a039cce 100644
+--- a/Resource/Init/gs_type1.ps
++++ b/Resource/Init/gs_type1.ps
+@@ -118,25 +118,25 @@
+ ( to be the same as glyph: ) print 1 index //==
exec } if
+ 3 index exch 3 index .forceput
+ %
scratch(string) RAGL(dict) AGL(dict) CharStrings(dict) cstring gname
+- }
++ }executeonly
+ {pop} ifelse
+- } forall
++ } executeonly forall
+ pop pop
+- }
++ } executeonly
+ {
+ pop pop pop
+ } ifelse
+- }
++ } executeonly
+ {
+ %
scratch(string) RAGL(dict) AGL(dict) CharStrings(dict) cstring gname
+ pop pop
+ } ifelse
+- } forall
++ } executeonly forall
+ 3 1 roll pop pop
+- } if
++ } executeonly if
+ pop
+ dup /.AGLprocessed~GS //true .forceput
+- } if
++ } executeonly if
+
+ %% We need to excute the C .buildfont1 in a stopped context so that, if
there
+ %% are errors we can put the stack back sanely and exit. Otherwise
callers won't
+-- 2.9.1
[SM-Commit] GIT changes to master grimoire by Pavel Vinogradov (1fbc63fdddb9949321d064aedd9b7fe638e6eec6),
Pavel Vinogradov, 08/15/2019