[ubuntu/bionic-security] qpdf 8.0.2-3ubuntu0.1 (Accepted)

[Marc Deslauriers]

qpdf (8.0.2-3ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: denial of service via crafted PDF file
    - debian/patches/CVE-2018-18020.patch: give up reading objects with too
      many consecutive errors in libqpdf/QPDFObjectHandle.cc,
      qpdf/qtest/qpdf.test, qpdf/qtest/qpdf/issue-100.out.
    - CVE-2018-18020
  * SECURITY UPDATE: heap-based buffer overflow in Pl_ASCII85Decoder::write
    - debian/patches/CVE-2021-36978.patch: fix some pipelines to be safe if
      downstream write fails in libqpdf/Pl_AES_PDF.cc,
      libqpdf/Pl_ASCII85Decoder.cc, libqpdf/Pl_ASCIIHexDecoder.cc,
      libqpdf/Pl_Count.cc.
    - CVE-2021-36978

Date: 2021-07-28 13:43:09.477053+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/qpdf/8.0.2-3ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.