[ubuntu/disco-proposed] poppler 0.71.0-2ubuntu2 (Accepted)

[Leonidas S. Barbosa]

poppler (0.71.0-2ubuntu2) disco; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-20481.patch: fix in
      poppler/XRef.cc.
    - CVE-2018-20481
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-20551.patch: fix in
      poppler/Annot.cc.
    - CVE-2018-20551
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-20650.patch: fix in
      poppler/FileSpec.cc.
    - CVE-2018-20650

Date: Mon, 21 Jan 2019 09:35:54 -0300
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/poppler/0.71.0-2ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 21 Jan 2019 09:35:54 -0300
Source: poppler
Binary: libpoppler82 libpoppler-dev libpoppler-private-dev libpoppler-glib8 libpoppler-glib-dev libpoppler-glib-doc gir1.2-poppler-0.18 libpoppler-qt5-1 libpoppler-qt5-dev libpoppler-cpp0v5 libpoppler-cpp-dev poppler-utils
Architecture: source
Version: 0.71.0-2ubuntu2
Distribution: disco
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Leonidas S. Barbosa <leo.barbosa at canonical.com>
Description:
 gir1.2-poppler-0.18 - GObject introspection data for poppler-glib
 libpoppler-cpp-dev - PDF rendering library -- development files (CPP interface)
 libpoppler-cpp0v5 - PDF rendering library (CPP shared library)
 libpoppler-dev - PDF rendering library -- development files
 libpoppler-glib-dev - PDF rendering library -- development files (GLib interface)
 libpoppler-glib-doc - PDF rendering library -- documentation for the GLib interface
 libpoppler-glib8 - PDF rendering library (GLib-based shared library)
 libpoppler-private-dev - PDF rendering library -- private development files
 libpoppler-qt5-1 - PDF rendering library (Qt 5 based shared library)
 libpoppler-qt5-dev - PDF rendering library -- development files (Qt 5 interface)
 libpoppler82 - PDF rendering library
 poppler-utils - PDF utilities (based on Poppler)
Changes:
 poppler (0.71.0-2ubuntu2) disco; urgency=medium
 .
   * SECURITY UPDATE: Denial of service
     - debian/patches/CVE-2018-20481.patch: fix in
       poppler/XRef.cc.
     - CVE-2018-20481
   * SECURITY UPDATE: Denial of service
     - debian/patches/CVE-2018-20551.patch: fix in
       poppler/Annot.cc.
     - CVE-2018-20551
   * SECURITY UPDATE: Denial of service
     - debian/patches/CVE-2018-20650.patch: fix in
       poppler/FileSpec.cc.
     - CVE-2018-20650
Checksums-Sha1:
 819c7ff22fcfc0b4e7910855a1a01c2c77500bfb 3379 poppler_0.71.0-2ubuntu2.dsc
 bddc43c743137d4a634c84f1162c4c680a6e6c48 34696 poppler_0.71.0-2ubuntu2.debian.tar.xz
 a9c0b76602ecde0e2dba841f4693fc5ada5413f3 14257 poppler_0.71.0-2ubuntu2_source.buildinfo
Checksums-Sha256:
 007d388866d5ebde8a67d1cbeaf6f005dfc2bdf516244537a6b7dd7f23da421e 3379 poppler_0.71.0-2ubuntu2.dsc
 95c4dab11b8cc78fa4e870ea126b2b90788c502985376d3cf4c833f3919ee1ea 34696 poppler_0.71.0-2ubuntu2.debian.tar.xz
 4fdb3b4e50e985138d7f5d7b8398aa5f3953b5515d6b3d64576e7cf6d33dd923 14257 poppler_0.71.0-2ubuntu2_source.buildinfo
Files:
 061ce68900cb787e751ff390db73cd30 3379 devel optional poppler_0.71.0-2ubuntu2.dsc
 cd19ca761062cf1ab8083304c0acbf22 34696 devel optional poppler_0.71.0-2ubuntu2.debian.tar.xz
 4ae641a85244c2ce9db6319c6809d9c0 14257 devel optional poppler_0.71.0-2ubuntu2_source.buildinfo
Original-Maintainer: Debian freedesktop.org maintainers <pkg-freedesktop-maintainers at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEUMSg3c8x5FLOsZtRZWnYVadEvpMFAlxKH+sACgkQZWnYVadE
vpPjARAAm2TPA95BeuIK+6Kbr2cvX9/Oz+VQHXOkDE1NjBdlN0vrkoZF6PembO62
Y12fktz2ChY9Duir/58PcNJXi4XnS0br4MTW3lXVXUR7hML0r/sr76lB0zFqnIWH
aTjUzNW8sbvpQs0nED7/e3gwmM2RH1ZqFVrqlWATImCZZPZfVNKFBA4svr5GKQnV
kNBLfMJ+wvsismZwFnIKenxXbYPVDybG3Q7QzrAwPRP+SgCXMUaj/pYZNnQ4y0Bo
/qRftrmmVcrNBNW47Y5hCyNmi+jkzlr8JcwOYukITo5FiX0pB3ky+2sk1osSyQ4s
yMYKpP/yqRhd6OaSFviWOlHthzy8wO0Lz95ojHWnCaCkYCruejGw+iPJ+nDGoj3x
KOIghN1UJAh1L+sTVjEUalqVw8JPKTz5KPDY8nGGdECUzVRWvOOmodq3B7hkXpp9
0ICFyIcoj9BIuW+3e3NN5HIS59xHJL3aKQFEq/if2VvF1bFSFmxTZvXHaXuKNuM7
/ICNmboOKpZO82nkZWJEaJfdQE6oxvAsvYbNCj0a51fASSWyixQ609+h8L3TXrVV
ZloKb6TIunZtnL4K1dp0LGJC/q0971eLud5xKRcPhqfRq7VCD9msqrlXBhLTGwF3
XS2LA2x8RgNApbDFTdbl+VqXcrrGWcOF00hBr3w/YQsenEw4Gd8=
=nKSL
-----END PGP SIGNATURE-----