Publishing details

Changelog

poppler (0.24.5-2ubuntu4.9) trusty-security; urgency=medium

  * SECURITY UPDATE: fails to validate boundaries in TextPool::addWord
    leading to overflow
    - debian/patches/CVE-2017-1000456.patch: fix crash in fuzzed file in
      poppler/TextOutputDev.cc.
    - CVE-2017-1000456
  * SECURITY UPDATE: has a heap-based buffer over-read vulnerability
    - debian/patches/CVE-2017-14976.patch: fix crash in broken files in
      fofi/FoFiType1C.cc.
    - CVE-2017-14976

 -- <email address hidden> (Leonidas S. Barbosa)  Thu, 04 Jan 2018 13:49:42 -0300

Available diffs

Builds

Package files