poppler 0.71.0-2ubuntu3 source package in Ubuntu

Changelog

poppler (0.71.0-2ubuntu3) disco; urgency=medium

  * SECURITY UPDATE: infinite recursion via crafted file
    - debian/patches/CVE-2018-16646.patch: avoid cycles in PDF parsing in
      poppler/Parser.cc, poppler/XRef.h. This patch also includes the
      regression fix in check entry.
    - CVE-2018-16646
  * SECURITY UPDATE: denial of service via reachable abort
    - debian/patches/CVE-2018-19058.patch: check for stream before calling
      stream methods when saving an embedded file in poppler/FileSpec.cc.
    - CVE-2018-19058
  * SECURITY UPDATE: denial of service via out-of-bounds read
    - debian/patches/CVE-2018-19059.patch: check for valid embedded file
      before trying to save it in utils/pdfdetach.cc.
    - CVE-2018-19059
  * SECURITY UPDATE: denial of service via NULL pointer dereference
    - debian/patches/CVE-2018-19060.patch: check for valid file name of
      embedded file in utils/pdfdetach.cc.
    - CVE-2018-19060

 -- <email address hidden> (Leonidas S. Barbosa)  Mon, 28 Jan 2019 09:58:13 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Sponsored by:
Marc Deslauriers
Uploaded to:
Disco
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
devel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
poppler_0.71.0.orig.tar.xz 1.4 MiB badbecd2dddf63352fd85ec08a9c2ed122fdadacf2a34fcb4cc227c4d01f2cf9
poppler_0.71.0-2ubuntu3.debian.tar.xz 35.8 KiB 9fd6e1a1ad1c40bd8956ba44e9116991553a7f2a36820b7d2b3f89fe4f1ed330
poppler_0.71.0-2ubuntu3.dsc 3.3 KiB 04e4d2cbdc8f61f44540247cf358b1a5b615034ebff39b59e5a6cba5496e5b5b

View changes file

Binary packages built by this source

gir1.2-poppler-0.18: No summary available for gir1.2-poppler-0.18 in ubuntu disco.

No description available for gir1.2-poppler-0.18 in ubuntu disco.

libpoppler-cpp-dev: No summary available for libpoppler-cpp-dev in ubuntu disco.

No description available for libpoppler-cpp-dev in ubuntu disco.

libpoppler-cpp0v5: No summary available for libpoppler-cpp0v5 in ubuntu disco.

No description available for libpoppler-cpp0v5 in ubuntu disco.

libpoppler-cpp0v5-dbgsym: No summary available for libpoppler-cpp0v5-dbgsym in ubuntu disco.

No description available for libpoppler-cpp0v5-dbgsym in ubuntu disco.

libpoppler-dev: No summary available for libpoppler-dev in ubuntu disco.

No description available for libpoppler-dev in ubuntu disco.

libpoppler-glib-dev: No summary available for libpoppler-glib-dev in ubuntu disco.

No description available for libpoppler-glib-dev in ubuntu disco.

libpoppler-glib-doc: No summary available for libpoppler-glib-doc in ubuntu disco.

No description available for libpoppler-glib-doc in ubuntu disco.

libpoppler-glib8: No summary available for libpoppler-glib8 in ubuntu disco.

No description available for libpoppler-glib8 in ubuntu disco.

libpoppler-glib8-dbgsym: No summary available for libpoppler-glib8-dbgsym in ubuntu disco.

No description available for libpoppler-glib8-dbgsym in ubuntu disco.

libpoppler-private-dev: No summary available for libpoppler-private-dev in ubuntu disco.

No description available for libpoppler-private-dev in ubuntu disco.

libpoppler-qt5-1: No summary available for libpoppler-qt5-1 in ubuntu disco.

No description available for libpoppler-qt5-1 in ubuntu disco.

libpoppler-qt5-1-dbgsym: No summary available for libpoppler-qt5-1-dbgsym in ubuntu disco.

No description available for libpoppler-qt5-1-dbgsym in ubuntu disco.

libpoppler-qt5-dev: No summary available for libpoppler-qt5-dev in ubuntu disco.

No description available for libpoppler-qt5-dev in ubuntu disco.

libpoppler82: No summary available for libpoppler82 in ubuntu disco.

No description available for libpoppler82 in ubuntu disco.

libpoppler82-dbgsym: No summary available for libpoppler82-dbgsym in ubuntu disco.

No description available for libpoppler82-dbgsym in ubuntu disco.

poppler-utils: No summary available for poppler-utils in ubuntu disco.

No description available for poppler-utils in ubuntu disco.

poppler-utils-dbgsym: No summary available for poppler-utils-dbgsym in ubuntu disco.

No description available for poppler-utils-dbgsym in ubuntu disco.