~ubuntu-branches/ubuntu/hardy/poppler/hardy-updates : changes

~ubuntu-branches/ubuntu/hardy/poppler/hardy-updates » Changes from revision 53

From Revision 53 to 34

Rev	Summary	Authors	Tags	Date
53	* SECURITY UPDATE: invalid memory access issues * SECURITY UPDATE: invalid memory access issues - debian/patches/110_security_CVE-2013-1788.patch: add checks in poppler/Function.cc, poppler/Stream.cc, splash/Splash.cc. - CVE-2013-1788 * SECURITY UPDATE: uninitialized memory read - debian/patches/111_security_CVE-2013-1790.patch: properly handle refLine in poppler/Stream.cc. - CVE-2013-1790	Marc Deslauriers	0.6.4-1ubuntu3.6	11 years ago
52	* SECURITY UPDATE: possible arbitrary code execution via mal... * SECURITY UPDATE: possible arbitrary code execution via malformed PDF - debian/patches/108_security_CVE-2010-3702.patch: properly initialize parser in poppler/Gfx.cc. - CVE-2010-3702 * SECURITY UPDATE: possible arbitrary code execution via malformed PDF - debian/patches/109_security_CVE-2010-3704.patch: make sure code isn't < 0 in fofi/FoFiType1.cc. - CVE-2010-3704	Marc Deslauriers	0.6.4-1ubuntu3.5	13 years ago
51	* SECURITY UPDATE: regression in poppler security update (LP... * SECURITY UPDATE: regression in poppler security update (LP: #457985) - debian/patches/105_security_CVE-2009-3605.patch: update patch to use gmallocn_checkoverflow in splash/SplashFTFont.cc, as bitmap->h can be 0 and this could cause a regression with certain applications. - CVE-2009-3605	Marc Deslauriers	0.6.4-1ubuntu3.4	14 years ago
50	* SECURITY UPDATE: denial of service or arbitrary code execu... * SECURITY UPDATE: denial of service or arbitrary code execution via unsafe malloc usage - debian/patches/105_security_CVE-2009-3605.patch: introduce gmallocn3 in goo/gmem.{cc,h} and replace malloc calls with safe versions in glib/poppler-page.cc, poppler/{ArthurOutputDev,CairoOutputDev, GfxState,JBIG2Stream,PSOutputDev,SplashOutputDev}.cc, splash/{SplashBitmap,Splash,SplashFTFont}.cc. - CVE-2009-3605 * SECURITY UPDATE: denial of service via invalid Form Opt entry (LP: #321764) - debian/patches/106_security_CVE-2009-0755.patch: handle invalid Opt entry gracefully in poppler/Form.cc. - CVE-2009-0755 * SECURITY UPDATE: denial of service or arbitrary code execution via overflow in rowSize computation - debian/patches/107_security_CVE-2009-360x.patch: make sure width value is sane in splash/SplashBitmap.cc. - CVE-2009-3603 * SECURITY UPDATE: denial of service or arbitrary code execution via overflow in pixel buffer size calculation - debian/patches/107_security_CVE-2009-360x.patch: make sure yp value is sane in splash/Splash.cc, splash/SplashErrorCodes.h. - CVE-2009-3604 * SECURITY UPDATE: denial of service or arbitrary code execution via overflow in object stream handling - debian/patches/107_security_CVE-2009-360x.patch: limit number of nObjects in poppler/XRef.cc. - CVE-2009-3608 * SECURITY UPDATE: denial of service or arbitrary code execution via integer overflow in ImageStream::ImageStream - debian/patches/107_security_CVE-2009-360x.patch: check size of width and nComps in poppler/Stream.cc. - CVE-2009-3609	Marc Deslauriers	0.6.4-1ubuntu3.3	14 years ago
49	* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution from multiple integer overflows, buffer overflows, and other issues with JBIG2 decoding. - debian/patches/104_security_jbig2.patch: prevent integer overflow in poppler/CairoOutputDev.cc and splash/SplashBitmap.cc, add overflow checking, improve error handling, and fix other issues in poppler/JBIG2Stream.*. - CVE-2009-0146 - CVE-2009-0147 - CVE-2009-0166 - CVE-2009-0799 - CVE-2009-0800 - CVE-2009-1179 - CVE-2009-1180 - CVE-2009-1181 - CVE-2009-1182 - CVE-2009-1183	Marc Deslauriers	0.6.4-1ubuntu3.2	15 years ago
48	* SECURITY UPDATE: crash via uninitialized pointer free(). * SECURITY UPDATE: crash via uninitialized pointer free(). * debian/patches/103_page_initialization.patch: upstream fix. * References CVE-2008-2950	Kees Cook	0.6.4-1ubuntu3.1	15 years ago
47	* SECURITY UPDATE: arbitrary code execution via malicious em... * SECURITY UPDATE: arbitrary code execution via malicious embedded fonts. * debian/patches/102_embedded-font-fixes.patch: stronger type-checking. * References CVE-2008-1693	Kees Cook	0.6.4-1ubuntu1	16 years ago
46	* Add ${shlibs:Depends} to libpoppler-glib-dev, libpoppler-d... * Add ${shlibs:Depends} to libpoppler-glib-dev, libpoppler-dev, libpoppler-qt-dev, libpoppler-qt4-dev. * Add ${misc:Depends}. * Cleanups. * New upstream releases; no API change; bug fixes; closes: #459342. * Fix copyright information to use version 2 of the GPL (instead of version 2 or later); thanks Timo Jyrinki for the patch; closes: #453865. * Urgency medium for RC bug fix. * List pdftohtml in poppler-utils' description; closes: #464439. * Drop libpoppler-qt-dev dependency from libpoppler-qt4-dev; thanks Pino Toscano; closes: #459922. * Bump up Standards-Version to 3.7.3.	Loic Minier	0.6.4-1	16 years ago
45	* New upstream version * New upstream version * debian/control: - updated maintainer information	Sebastien Bacher	0.6.4-0ubuntu1	16 years ago
44	* New upstream version. (Closes: #447992) * New upstream version. (Closes: #447992) * Dependency on xpdfrc was removed on 2007-02-25 (Closes: #347789, #440936) * Changes since 0.6.1: - Fix CVE-2007-4352, CVE-2007-5392 and CVE-2007-5393 (Closes: #450628) - Fix a crash on documents with wrong CCITTFaxStream - Fix a crash in the Cairo renderer with invalid embedded fonts - Fix a crash with invalid TrueType fonts - Check if font is inside the clip area before rendering it to a temporary bitmap in the Splash renderer. Fixes crashes on incorrect documents - Do not use exit(1) on DCTStream errors - Detect form fields at any depth level - Do not generate appearance stream for radio buttons that are not active	Ondřej Surý	0.6.2-1	16 years ago
43	* debian/patches/090_from_git_fix_forms_fields_crasher.patch... * debian/patches/090_from_git_fix_forms_fields_crasher.patch: - patch from git, fix a forms fields array cracher (LP: #11865)	Sebastien Bacher	0.6-0ubuntu2	16 years ago
42	* New upstream version: * New upstream version: - CairoOutputDev fixes - Allow pdftoppm to read/write from stdin/stdout - API work on Qt4 frontend - Fix pdfimages produces inverted image for black & white image - Fix error on the NFKC text matching routine - Add support for word and line selections - Do not enforce %%EOF at the end of file - Pad zeroes instead of aborting when rendering 1-bit images and the stream is too short - Update glib bindings documentation * debian/control, debian/libpoppler2.install, debian/libpoppler-glib2.install, debian/libpoppler-qt2.install, debian/libpoppler-qt4-2.install, debian/rules: - updated for soname change * debian/libpoppler-glib-dev.install: - install new test-poppler-glib * debian/patches/006_pthreads_ldflags.patch: - updated	Sebastien Bacher	0.6-0ubuntu1	16 years ago
41	* New upstream bugfix release. * New upstream bugfix release. - Fixes crash in glib action handlers. (LP: #126449) - Fixes out-of-place graphics and tables. (LP: #124777) - Fix crash on amd64 with slightly broken Scribus files. (LP: #123116) - pdftops does not produce broken PostScript any more. (LP: #124777) * Update debian/patches/006_pthreads_ldflags.patch to new upstream version. * Drop debian/patches/100_streampredictor_overflow.patch, applied upstream. * debian/rules: Bump shlibs, there are some new APIs.	Martin Pitt	0.5.91-0ubuntu1	16 years ago
40	* SECURITY UPDATE: arbitrary code execution via crafted PDFs * SECURITY UPDATE: arbitrary code execution via crafted PDFs * Add debian/patches/100_streampredictor_overflow.patch: upstream fixes. * References CVE-2007-3387	Kees Cook	0.5.9-0ubuntu2	16 years ago
39	* New upstream version: * New upstream version: - Merge xpdf 3.02 changes - Qt4 frontend is not marked anymore as unstable - Support for Sound objects - Support for Opening/Closing page actions - Support for page duration - Improve PS Tokenizer performance thanks to Scott Turner - Various speed ups by Krzysztof Kowalczyk - Beginning of Interactive Form support by Julien Rebetez - xpdfrc is no longer used for anything - Add AbiWord output device and pdftoabw program by Jauco Noordzij - Fix security issue MOAB-06-01-2007 - Lots of bugs fixed * debian/libpoppler-qt-dev.install, debian/libpoppler-qt4-dev.install: - updated for changes from the new version * debian/patches/002_CVE-2006-0301.patch: - dropped, deprecated by the upstream changes * debian/patches/003_glib-2.0-configure.patch: - dropped, fixed with the new version * debian/patches/004_CVE-2007-0104.patch: - dropped, fixed with the new version * debian/patches/005_fix_inverted_text_from_bug_8944.patch: - dropped, fixed with the new version * debian/rules: - drop sysconfdir hack, not required with the new version - updated shlibs version	Sebastien Bacher	0.5.9-0ubuntu1	16 years ago
38	* Merge to Debian unstable. Remaining Ubuntu changes: * Merge to Debian unstable. Remaining Ubuntu changes: - debian/control: Add Conflicts: from libpoppler-qt4-1 to the old name libpoppler1-qt4. This needs to be kept for gutsy only (since it was not in the current LTS). - debian/control: Add ghostscript recommendation to poppler-utils. (LP #117530)	Martin Pitt	0.5.4-6ubuntu1	16 years ago
37	* debian/control: Add dependency libpoppler-qt-dev to libpop... * debian/control: Add dependency libpoppler-qt-dev to libpoppler-qt4-dev, so that build-depending on the latter pulls in the required file poppler-page-transition.h. That's ugly, but still better than shipping the file in both packages and make them conflict to each other. (LP: #114186) * Ship poppler-link-qt3.h in libpoppler-qt-dev. (LP: #117388) * debian/control: Add 'ghostscript' recommends to poppler-utils. (LP: #117530)	Martin Pitt	0.5.4-4ubuntu2	16 years ago
36	debian/control: Add Conflicts/Replaces to the old library na... debian/control: Add Conflicts/Replaces to the old library names.	Martin Pitt	0.5.4-4ubuntu1	16 years ago
35	* The "Augean Stables" release. * The "Augean Stables" release. * 0.5.x branch fixes all kind of displaying errors Closes: #372169, #235360, #331380, #332426, #336616 Closes: #402647, #369164, #413953, #343654 * Add versioned conflict to pdftohtml (Closes: #393169) * We dropped .la files some time ago, libjpeg62-dev dependency not needed now (Closes: #413112) * Crash fixed in 0.5.4 (Closes: #418638) * [control.in]: dropped some time ago (Closes: #407818) * NMU 0.5.4-5.1 merged as 004_CVE-2007-0104.patch (Closes: #407810) * 0.5.x uploaded to unstable (Closes: #352522) * qt4 libraries are now part of build (Closes: #414643) * No longer depends on poppler-data (Closes: #389753) * [debian/patches/006_pthreads_ldflags.patch]: + Add -lpthread to poppler/Makefile.am (Closes: #399275)	Ondřej Surý	0.5.4-4	16 years ago
34	* debian/patches/005_fix_inverted_text_from_bug_8944.patch: * debian/patches/005_fix_inverted_text_from_bug_8944.patch: - fixes "text is inverted in some PDFs" (LP: #93772)	Daniel Holbach	0.5.4-0ubuntu8	17 years ago

Older »