[ubuntu/jammy-security] poppler 22.02.0-2ubuntu0.3 (Accepted)

Nishit Majithia nishit.majithia at canonical.com
Thu Nov 23 02:49:04 UTC 2023


poppler (22.02.0-2ubuntu0.3) jammy-security; urgency=medium

  * SECURITY UPDATE: denial of service issue
    - debian/patches/CVE-2022-37050.patch: pdfseparate: Check XRef's
      Catalog for being a Dict
    - debian/patches/CVE-2022-37051.patch: Check isDict before calling
      getDict
    - debian/patches/CVE-2022-37052.patch: pdfseparate: Account for
      XRef::add failing because we run out of memory
    - debian/patches/CVE-2022-38349.patch: pdfunite: Fix crash on broken
      files
    - CVE-2022-37050
    - CVE-2022-37051
    - CVE-2022-37052
    - CVE-2022-38349

Date: 2023-11-22 06:27:10.181613+00:00
Changed-By: Nishit Majithia <nishit.majithia at canonical.com>
https://launchpad.net/ubuntu/+source/poppler/22.02.0-2ubuntu0.3
-------------- next part --------------
Sorry, changesfile not available.


More information about the jammy-changes mailing list