Change logs for poppler source package in Lenny

  • poppler (0.8.7-4) stable-security; urgency=high
      * CVE-2010-3702 CVE-2010-3704 -- Moritz Muehlenhoff <email address hidden>  Wed, 06 Oct 2010 21:31:29 +0000
  • poppler (0.8.7-3.1) stable-proposed-updates; urgency=high
    
    
      * Non-maintainer upload by the Security Team.
      * Fix integer overflow in SplashBitmap::SplashBitmap leading to a
        heap-based buffer overflow resulting in arbitrary code execution via
        crafted pdf files (CVE-2009-1188; Closes: #524806).
    
     -- Luciano Bello <email address hidden>  Mon, 22 Mar 2010 11:21:14 -0300
  • poppler (0.8.7-3) stable-security; urgency=high
    
    
      * Non-maintainer upload by the Security Team.
      * Fix CVE-2009-3603 to CVE-2009-3609, CVE-2009-0755. Based on patches
        by Marc Deslauriers
      * Fix CVE-2009-3938
    
     -- Moritz Muehlenhoff <email address hidden>  Tue, 24 Nov 2009 21:54:26 +0100
  • poppler (0.8.7-2) stable; urgency=high
    
    
      * 11_JBIG2_CVEs.patch: backport several fixes related to parsing of 
        broken JBIG2 files.
        CVE-2009-0799, CVE-2009-0800, CVE-2009-1179, CVE-2009-1180,
        CVE-2009-1181, CVE-2009-1182, CVE-2009-1183, CVE-2009-1187, 
        CVE-2009-1188.
    
     -- Josselin Mouette <email address hidden>  Fri, 17 Apr 2009 11:07:07 +0200
  • poppler (0.8.7-1) unstable; urgency=low
    
    
      * Bump up Standards-Version to 3.8.0.
      * New patch, 61_manpages-hyphens, fixes escaping of hyphens in man pages;
        FreeDesktop #17225.
      * New patch, 62_pdftops-mandatory-arg, fixes synopsis of pdftops in man page
        to clarify that a PDF file is required in all cases; FreeDesktop #17226;
        closes: #491816.
      * Build-dep on cdbs (>= 0.4.52) and add a lintian override with rationale
        for the following lintian warning:
        W: poppler-dbg: dbg-package-missing-depends poppler
      * Add xrefs and CVE for #489756 in 0.8.5-1 as I didn't merge the 0.8.4-1.1
        NMU.
      * New upstream release; no API change, bug fixes.
    
     -- Loic Minier <email address hidden>  Wed, 20 Aug 2008 17:36:12 +0200