[ubuntu/bionic-security] poppler 0.62.0-2ubuntu2.4 (Accepted)

[Leonidas S. Barbosa]

poppler (0.62.0-2ubuntu2.4) bionic-security; urgency=medium

  [ Marc Deslauriers ]
  * SECURITY UPDATE: infinite recursion via crafted file
    - debian/patches/CVE-2018-16646.patch: avoid cycles in PDF parsing in
      poppler/Parser.cc, poppler/XRef.h.
    - CVE-2018-16646
  * SECURITY UPDATE: denial of service via reachable abort
    - debian/patches/CVE-2018-19058.patch: check for stream before calling
      stream methods when saving an embedded file in poppler/FileSpec.cc.
    - CVE-2018-19058
  * SECURITY UPDATE: denial of service via out-of-bounds read
    - debian/patches/CVE-2018-19059.patch: check for valid embedded file
      before trying to save it in utils/pdfdetach.cc.
    - CVE-2018-19059
  * SECURITY UPDATE: denial of service via NULL pointer dereference
    - debian/patches/CVE-2018-19060.patch: check for valid file name of
      embedded file in utils/pdfdetach.cc.
    - CVE-2018-19060

poppler (0.62.0-2ubuntu2.3) bionic; urgency=medium

  * debian/patches/git_embed_segfault.patch:
    - "Check whether an embedded file is actually present in the PDF
       and show warning in that case." (lp: #1803059)
    - CVE-2018-19149

Date: 2018-12-03 16:11:53.993098+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/poppler/0.62.0-2ubuntu2.4
-------------- next part --------------
Sorry, changesfile not available.