Accepted poppler 0.26.5-2+deb8u2 (source amd64 all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 02 Dec 2017 07:34:06 +0100
Source: poppler
Binary: libpoppler46 libpoppler-dev libpoppler-private-dev libpoppler-glib8 libpoppler-glib-dev libpoppler-glib-doc gir1.2-poppler-0.18 libpoppler-qt4-4 libpoppler-qt4-dev libpoppler-qt5-1 libpoppler-qt5-dev libpoppler-cpp0 libpoppler-cpp-dev poppler-utils poppler-dbg
Architecture: source amd64 all
Version: 0.26.5-2+deb8u2
Distribution: jessie-security
Urgency: medium
Maintainer: Loic Minier <lool@dooz.org>
Changed-By: Santiago R.R. <santiagorr@riseup.net>
Description:
gir1.2-poppler-0.18 - GObject introspection data for poppler-glib
libpoppler-cpp-dev - PDF rendering library -- development files (CPP interface)
libpoppler-cpp0 - PDF rendering library (CPP shared library)
libpoppler-dev - PDF rendering library -- development files
libpoppler-glib-dev - PDF rendering library -- development files (GLib interface)
libpoppler-glib-doc - PDF rendering library -- documentation for the GLib interface
libpoppler-glib8 - PDF rendering library (GLib-based shared library)
libpoppler-private-dev - PDF rendering library -- private development files
libpoppler-qt4-4 - PDF rendering library (Qt 4 based shared library)
libpoppler-qt4-dev - PDF rendering library -- development files (Qt 4 interface)
libpoppler-qt5-1 - PDF rendering library (Qt 5 based shared library)
libpoppler-qt5-dev - PDF rendering library -- development files (Qt 5 interface)
libpoppler46 - PDF rendering library
poppler-dbg - PDF rendering library -- debugging symbols
poppler-utils - PDF utilities (based on Poppler)
Changes:
poppler (0.26.5-2+deb8u2) jessie-security; urgency=medium
.
* Fix CVE-2017-9406: a memory leak vulnerability was found in the function
gmalloc in gmem.cc, which allows attackers to cause a denial of service
via a crafted file.
* Fix CVE-2017-9408: memory leak in the function Object::initArray in
Object.cc that allows attackers to cause a DoS via a crafted file.
* Fix CVE-2017-9775: Stack buffer overflow in GfxState.cc in pdftocairo that
allows remote attackers to cause a denial of service (application crash)
via a crafted PDF document.
* Fix CVE-2017-9776: Integer overflow leading to Heap buffer overflow in
JBIG2Stream.cc in pdftocairo allows remote attackers to cause a denial of
service (application crash) or possibly have unspecified other impact via a
crafted PDF document.
* Fix CVE-2017-9865: The function GfxImageColorMap::getGray in GfxState.cc
allows remote attackers to cause a denial of service (stack-based buffer
over-read and application crash) via a crafted PDF document
* Fix CVE-2017-14517: NULL pointer dereference vulnerability in the
XRef::parseEntry() function in XRef.cc
* Fix CVE-2017-14518: Floating point exception in the
isImageInterpolationRequired() function in Splash.cc
* Fix CVE-2017-14519: A memory corruption may occur in a call to
Object::streamGetChar
* Fix CVE-2017-14520: Floating point exception in Splash::scaleImageYuXd()
* Fix CVE-2017-14617: Floating point exception in the ImageStream class in
Stream.cc
* Fix CVE-2017-14975: NULL pointer dereference vulnerability in the
FoFiType1C::convertToType0 function in FoFiType1C.cc
* Fix CVE-2017-14976: Heap-based buffer over-read vulnerability in the
FoFiType1C::convertToType0 function in FoFiType1C.cc
* Fix CVE-2017-14977: NULL pointer dereference vulnerability in the
FoFiTrueType::getCFFBlock function in FoFiTrueType.cc
* Fix CVE-2017-15565: NULL Pointer Dereference in the
GfxImageColorMap::getGrayLine() function in GfxState.cc
Checksums-Sha1:
be3e9a46f381d4d1d051f176dbdb9b71009f25a8 3302 poppler_0.26.5-2+deb8u2.dsc
7b9c338734f6c98adcced62625817a382e8d22d7 37688 poppler_0.26.5-2+deb8u2.debian.tar.xz
f9127e30e6d21be24a2db0589829b17838396809 1211322 libpoppler46_0.26.5-2+deb8u2_amd64.deb
7e201c3b3eaa6b2a5e133bf89c31d8b9b59a4c06 766080 libpoppler-dev_0.26.5-2+deb8u2_amd64.deb
783c0abd6c50db4a818743fbc73f379e6693131b 179572 libpoppler-private-dev_0.26.5-2+deb8u2_amd64.deb
02ca60a69364bdf7a8926d1850716ba258a57baf 121706 libpoppler-glib8_0.26.5-2+deb8u2_amd64.deb
c95c706e96b6df0bfa7fa0ba12897ef4024e6402 162006 libpoppler-glib-dev_0.26.5-2+deb8u2_amd64.deb
6ac2ff27735b995cbb9c32c4cf1d55aaa3dccc04 85460 libpoppler-glib-doc_0.26.5-2+deb8u2_all.deb
ce51dd987aff7aa1bfe54e16e8495cd74435cc0e 33572 gir1.2-poppler-0.18_0.26.5-2+deb8u2_amd64.deb
ed4254cc94c0212e4d5ad4100796cbd504db8d97 126640 libpoppler-qt4-4_0.26.5-2+deb8u2_amd64.deb
22c546737e72cbe3550f9a0ffc1bc618eb956e3c 157778 libpoppler-qt4-dev_0.26.5-2+deb8u2_amd64.deb
b448933125fdaf625011ebf213d821e4c382b2b2 131338 libpoppler-qt5-1_0.26.5-2+deb8u2_amd64.deb
b6eaf7117dc4075415ac198800b433dba06fe98f 164918 libpoppler-qt5-dev_0.26.5-2+deb8u2_amd64.deb
69a9b7789eac92c9a963fce86253a0fa53a8590f 44050 libpoppler-cpp0_0.26.5-2+deb8u2_amd64.deb
e098ca7e9971be5f5ebcea3349c201458c755361 48570 libpoppler-cpp-dev_0.26.5-2+deb8u2_amd64.deb
e85cf39ec07279741569543fe6d4ba8f56b54523 140340 poppler-utils_0.26.5-2+deb8u2_amd64.deb
3de2a10fd783135e3dac2907cd0263af3c2f8d01 7683558 poppler-dbg_0.26.5-2+deb8u2_amd64.deb
Checksums-Sha256:
31d36174e01ae2ac977886ee596720a0172c8fbee89adb8f7e25210b6e1af5c4 3302 poppler_0.26.5-2+deb8u2.dsc
ebfbe4ae7c234d748aacfff5054f0c53b4130dd8cf97742dda10b4814e96960c 37688 poppler_0.26.5-2+deb8u2.debian.tar.xz
94463745121736f1cbc0fce9f831ea31fdce0e5f151451384ea77531233ae56b 1211322 libpoppler46_0.26.5-2+deb8u2_amd64.deb
bce934d1accb089bc9cb812fb902aa131cfdbc31a0bdff9c9a36402c2ff2d99e 766080 libpoppler-dev_0.26.5-2+deb8u2_amd64.deb
70ed1d3317a4c8ac58b400006d607ec5c1d75a19b2850e82869dca4c92b24389 179572 libpoppler-private-dev_0.26.5-2+deb8u2_amd64.deb
9e2635ed654837294b3b6099060efb5f7ee0b2f74369c2cfbe28563f5e504cf2 121706 libpoppler-glib8_0.26.5-2+deb8u2_amd64.deb
62ad095de284bfb1b9e8477df080a4f1ddb1fb146638c8585aeee72d043e14fc 162006 libpoppler-glib-dev_0.26.5-2+deb8u2_amd64.deb
9e53523ef4760bd1e025e8a76eef48fa46effcb2368547c11d1e1f21844bcd67 85460 libpoppler-glib-doc_0.26.5-2+deb8u2_all.deb
179a0bb731c5abb55a049fb9731136784e6025182cd73853da3d28aad9062be4 33572 gir1.2-poppler-0.18_0.26.5-2+deb8u2_amd64.deb
64f446cc8168344d331037ad1b873a689944da60fba944cdfceaa8f3d047c0f5 126640 libpoppler-qt4-4_0.26.5-2+deb8u2_amd64.deb
d8c2ddb5e782fabd431bfb87e09bb575f58536b81c68de21a10add35c482d260 157778 libpoppler-qt4-dev_0.26.5-2+deb8u2_amd64.deb
05daa36fde7db572b767d937677d00950d05c8dd4f1fe56b40ed4c9ff9b0feeb 131338 libpoppler-qt5-1_0.26.5-2+deb8u2_amd64.deb
57111144386518e5b1e3045841947c320f5d22003a9bc30c031bfc65700e3f8d 164918 libpoppler-qt5-dev_0.26.5-2+deb8u2_amd64.deb
be040db29493f9d5f035246d9aea92985809a3518b9d5ab48accf1bde1633939 44050 libpoppler-cpp0_0.26.5-2+deb8u2_amd64.deb
4f799471186729c1f5c586e0c732c260a3bd5708a1c7f979a1b7bb011aa2f452 48570 libpoppler-cpp-dev_0.26.5-2+deb8u2_amd64.deb
271f5561b5adee179397f8534e67f8fecd9ee660ab9d4fa33aa7f7ab34804369 140340 poppler-utils_0.26.5-2+deb8u2_amd64.deb
8b6f26d70617a030ed00f9a59ee08d584d39a4f1fc325c5cacab4f243b56c1ef 7683558 poppler-dbg_0.26.5-2+deb8u2_amd64.deb
Files:
70cce25e01aacdf12baccc89e8728fb2 3302 devel optional poppler_0.26.5-2+deb8u2.dsc
a7ab0709211aa05e022e70531041f769 37688 devel optional poppler_0.26.5-2+deb8u2.debian.tar.xz
f19dd4d200598111f224bfe0ac61ee56 1211322 libs optional libpoppler46_0.26.5-2+deb8u2_amd64.deb
b3425769b86579af58fddd6cbed6346e 766080 libdevel optional libpoppler-dev_0.26.5-2+deb8u2_amd64.deb
0ce5b82324a4746302e124bbaeed91bc 179572 libdevel optional libpoppler-private-dev_0.26.5-2+deb8u2_amd64.deb
afebc792c291d0394d7515671fd1c9b0 121706 libs optional libpoppler-glib8_0.26.5-2+deb8u2_amd64.deb
82a31f33b3a6adf5bf0791360eb625ba 162006 libdevel optional libpoppler-glib-dev_0.26.5-2+deb8u2_amd64.deb
23ca740b509406b5e325be03910f03b3 85460 doc optional libpoppler-glib-doc_0.26.5-2+deb8u2_all.deb
ed20178dcf2c6dde69773e67b179606d 33572 introspection optional gir1.2-poppler-0.18_0.26.5-2+deb8u2_amd64.deb
554cef42ec0de0d4e76cc7e03f86c9fa 126640 libs optional libpoppler-qt4-4_0.26.5-2+deb8u2_amd64.deb
69e063f456af38cde43b320a805944c5 157778 libdevel optional libpoppler-qt4-dev_0.26.5-2+deb8u2_amd64.deb
220212df6ff2a98c71770410079ce8f6 131338 libs optional libpoppler-qt5-1_0.26.5-2+deb8u2_amd64.deb
12d038fc6ef340acfcc3afd4c929ff2f 164918 libdevel optional libpoppler-qt5-dev_0.26.5-2+deb8u2_amd64.deb
25104f7e8157fb60f9227bd366fad4f3 44050 libs optional libpoppler-cpp0_0.26.5-2+deb8u2_amd64.deb
6e6ce8f1889d1b714eeccb196b48f5a7 48570 libdevel optional libpoppler-cpp-dev_0.26.5-2+deb8u2_amd64.deb
cf8b087e37dd6abf0cc971cf3df6d43d 140340 utils optional poppler-utils_0.26.5-2+deb8u2_amd64.deb
a660e6feead14bd05f59c8d2fa3f0208 7683558 debug extra poppler-dbg_0.26.5-2+deb8u2_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEwUqnBPVvaa0NAVzHFX/a4RXx4q0FAlpJHFMACgkQFX/a4RXx
4q3QDg/9H9CpeUqrUYP1g+BmHpaKoajZF2A6gF1KqEIAOqi95wsoYeroMrEcUhBR
umJn36PKV7xcXWchuOD1od00u2Q08YqXjSAbIs/Nwnj0bhaDElKIxL+qNfy4J2IC
Vhuo2oSG8ktGR1TlxwFyvfi7iK6bTcXv2gzv4vzIstIeLxPTR3zsjUjFMDoSRIhP
LbAJCIDBg4jkvrYV6DOp0PDZEeaSbfYKH6Kj2QxiaDeJO7SPj9uz06yLSpK7gxKq
48DN6j6SWmksctqAdvYDdxzQoSPmcP0zoUBxE+Z5EqykZlmIO/j1PUR9ZWJx/wL4
DbXPrpT7XOrXITCtmEXkhXEb4/oeHPniSJ6oUAZLaZW1UD2Vyc7+Q77AGStQmBd6
wEvAS7GBgYt2TlNZYAeCTRxUeimmtibaLeuFGwTotpa1lMOa8QRCAQT9qqXDC0w3
2Ojcpz+Fh2mcG6lbJwrr6Dhm2g6A/4tzoZAOcxwUIZYxrchZpVTAWZboDzOeUm3n
wN/7cvAxRPFYAqM6/KvOzjzkxVdlH3OxPbSN97L+JeLvprp6uzA6DjKbWDiIltGx
LDcEFxUhh4vjdn42GU4wJB6+6KpKtgHZI1APlOrWhF3dg/4Hs8N7m381OBUqJfZH
DnnBe0nBaDI572tt+D0U6Q919rzoBmLk0ZNd939k34eLctQfmeY=
=sCHc
-----END PGP SIGNATURE-----