[ubuntu/precise-security] poppler 0.18.4-1ubuntu3.2 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Mon May 2 16:52:09 UTC 2016
poppler (0.18.4-1ubuntu3.2) precise-security; urgency=medium
* SECURITY UPDATE: denial of service in pdfseparate via long filename
- debian/patches/CVE-2013-4473.patch: improve path building in
utils/pdfseparate.cc.
- CVE-2013-4473
* SECURITY UPDATE: denial of service in pdfseparate via string specifiers
in filename
- debian/patches/CVE-2013-4474.patch: properly filter filename in
utils/pdfseparate.cc.
- CVE-2013-4474
* SECURITY UPDATE: heap overflow on invalid files
- debian/patches/CVE-2015-8868.patch: check length of C0 array in
poppler/Function.cc.
- CVE-2015-8868
Date: 2016-04-29 20:49:15.181282+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/poppler/0.18.4-1ubuntu3.2
-------------- next part --------------
Sorry, changesfile not available.
More information about the Precise-changes
mailing list