poppler 0.84 (JollaPhone & X)
sha256sum filename:
f6ee89796ab4f8372465a1fc5d2bb9055d8ea44d8bdb5ab07595b2428936ecf8 poppler-0.84.0+git3-2.armv7hl.rpm
cb4b2a19c0119317d5f1755c1dd28a0500a4370437024229c9dfa2c91a915809 poppler-devel-0.84.0+git3-2.armv7hl.rpm
5663efd0a081cdaf194d045d8960acb6522d8eb0b8ae24b2c0dc842a51edb08d poppler-glib-0.84.0+git3-2.armv7hl.rpm
84d51110f5381e02c81025f689f467e9a1334aa28b8049e49fb7039449d62e38 poppler-glib-devel-0.84.0+git3-2.armv7hl.rpm
d8d0569b23b8aa60e8412c84f6643d1fa9fa3098e9a43e4dff72304bf5722917 poppler-glib-doc-0.84.0+git3-2.noarch.rpm
836b51c5f47cc00e037a3072315e4e0a6abe7c1e7ddb6c83f90ad19b3d30db62 poppler-qt5-0.84.0+git3-2.armv7hl.rpm
011910dba5c9634bd5777fa72860c2a507bed0a06e9404d5ef0f86290f0f33fc poppler-qt5-devel-0.84.0+git3-2.armv7hl.rpm
755308c6f5a3caaab9612541e8489bedfcba0173bd474276dd480aed2c062d03 poppler-utils-0.84.0+git3-2.armv7hl.rpm
Category:
version 0ubuntu1.6 (13.03.2019):
* SECURITY UPDATE: Denial of service
- debian/patches/CVE-2019-9200.patch: fix in poppler/Stream.cc.
- CVE-2019-9200
version 0ubuntu1.5 (11.02.2019):
* SECURITY UPDATE: Denial of service
- debian/patches/CVE-2018-20551.patch: fix in poppler/Annot.cc.
- CVE-2018-20551
* SECURITY UPDATE: Denial of service
- debian/patches/CVE-2019-7310.patch: fix in poppler/XRef.cc.
- CVE-2019-7310
version 0ubuntu1.4 (22.01.2019):
* SECURITY UPDATE: Denial of service
- debian/patches/CVE-2018-20481.patch: fix in poppler/XRef.cc.
- CVE-2018-20481
* SECURITY UPDATE: Denial of service
- debian/patches/CVE-2018-20650.patch: fix in poppler/FileSpec.cc.
- CVE-2018-20650
version 0ubuntu1.3 (10.12.2018):
* SECURITY REGRESSION: fixing regression in check entry
- debian/patches/CVE-2018-16646-fix-regression-p1.patch
- debian/patches/CVE-2018-16646-fix-regression-p2.patch
version 0ubuntu1.2 (04.12.2018):
* SECURITY UPDATE: infinite recursion via crafted file
- debian/patches/CVE-2018-16646.patch: avoid cycles in PDF parsing in poppler/Parser.cc, poppler/XRef.h.
- CVE-2018-16646
* SECURITY UPDATE: denial of service via reachable abort
- debian/patches/CVE-2018-19058.patch: check for stream before calling stream methods when saving an embedded file in poppler/FileSpec.cc.
- CVE-2018-19058
* SECURITY UPDATE: denial of service via out-of-bounds read
- debian/patches/CVE-2018-19059.patch: check for valid embedded file before trying to save it in utils/pdfdetach.cc.
- CVE-2018-19059
* SECURITY UPDATE: denial of service via NULL pointer dereference
- debian/patches/CVE-2018-19060.patch: check for valid file name of embedded file in utils/pdfdetach.cc.
- CVE-2018-19060
* debian/patches/git_embed_segfault.patch:
- "Check whether an embedded file is actually present in the PDF and show warning in that case." (lp: #1803059)
- CVE-2018-19149
Laatste reacties