[ubuntu/precise-updates] poppler 0.18.4-1ubuntu3.2 (Accepted)
Ubuntu Archive Robot
cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk
Mon May 2 17:58:23 UTC 2016
poppler (0.18.4-1ubuntu3.2) precise-security; urgency=medium
* SECURITY UPDATE: denial of service in pdfseparate via long filename
- debian/patches/CVE-2013-4473.patch: improve path building in
utils/pdfseparate.cc.
- CVE-2013-4473
* SECURITY UPDATE: denial of service in pdfseparate via string specifiers
in filename
- debian/patches/CVE-2013-4474.patch: properly filter filename in
utils/pdfseparate.cc.
- CVE-2013-4474
* SECURITY UPDATE: heap overflow on invalid files
- debian/patches/CVE-2015-8868.patch: check length of C0 array in
poppler/Function.cc.
- CVE-2015-8868
Date: 2016-04-29 20:49:15.181282+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/poppler/0.18.4-1ubuntu3.2
-------------- next part --------------
Sorry, changesfile not available.
More information about the Precise-changes
mailing list