Ubuntu
qpdf package

qpdf 8.0.2-3ubuntu0.1 source package in Ubuntu

Changelog

qpdf (8.0.2-3ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: denial of service via crafted PDF file
    - debian/patches/CVE-2018-18020.patch: give up reading objects with too
      many consecutive errors in libqpdf/QPDFObjectHandle.cc,
      qpdf/qtest/qpdf.test, qpdf/qtest/qpdf/issue-100.out.
    - CVE-2018-18020
  * SECURITY UPDATE: heap-based buffer overflow in Pl_ASCII85Decoder::write
    - debian/patches/CVE-2021-36978.patch: fix some pipelines to be safe if
      downstream write fails in libqpdf/Pl_AES_PDF.cc,
      libqpdf/Pl_ASCII85Decoder.cc, libqpdf/Pl_ASCIIHexDecoder.cc,
      libqpdf/Pl_Count.cc.
    - CVE-2021-36978

 -- Marc Deslauriers <email address hidden>  Wed, 28 Jul 2021 09:13:45 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates main libs
Bionic security main libs

Downloads

File Size SHA-256 Checksum
qpdf_8.0.2.orig.tar.gz 7.6 MiB b09e1730b515956903866619b466da359cc051ae8c9d8690d8e7a2aca493c8c1
qpdf_8.0.2.orig.tar.gz.asc 801 bytes 57a4287c2b05fe8b0ba17999da9de8d08bfebf14392582969955b6afdd69b8b6
qpdf_8.0.2-3ubuntu0.1.debian.tar.xz 15.8 KiB 3803bec6e271d7cb83e6dd11de9e0e6e188effa30a259f9a6eb7627cf91feca2
qpdf_8.0.2-3ubuntu0.1.dsc 2.1 KiB 3d81be2d9b5915af0b6bb51452a6d98aca58cac54f3068734cd1beff40144441

View changes file

Binary packages built by this source

libqpdf-dev: development files for PDF transformation/inspection library

 QPDF is a program that can be used to linearize (web-optimize),
 encrypt (password-protect), decrypt, and inspect PDF files from the
 command-line. It does these and other structural, content-preserving
 transformations on PDF files, reading a PDF file as input and
 creating a new one as output. It also provides many useful
 capabilities to developers of PDF-producing software or for people
 who just want to look at the innards of a PDF file to learn more
 about how they work.
 .
 QPDF understands PDF files that use compressed object streams
 (supported by newer PDF applications) and can convert such files into
 those that can be read with older viewers. It can also be used for
 checking PDF files for structural errors, inspecting stream contents,
 or extracting objects from PDF files. QPDF is not PDF content
 creation or viewing software -- it does not have the capability to
 create PDF files from scratch or to display PDF files.
 .
 This package includes all development files needed to compile
 applications that use the qpdf library.

libqpdf21: runtime library for PDF transformation/inspection software

 QPDF is a program that can be used to linearize (web-optimize),
 encrypt (password-protect), decrypt, and inspect PDF files from the
 command-line. It does these and other structural, content-preserving
 transformations on PDF files, reading a PDF file as input and
 creating a new one as output. It also provides many useful
 capabilities to developers of PDF-producing software or for people
 who just want to look at the innards of a PDF file to learn more
 about how they work.
 .
 QPDF understands PDF files that use compressed object streams
 (supported by newer PDF applications) and can convert such files into
 those that can be read with older viewers. It can also be used for
 checking PDF files for structural errors, inspecting stream contents,
 or extracting objects from PDF files. QPDF is not PDF content
 creation or viewing software -- it does not have the capability to
 create PDF files from scratch or to display PDF files.
 .
 This package contains the qpdf runtime libraries required to run
 programs that link with the qpdf library.

libqpdf21-dbgsym: debug symbols for libqpdf21
qpdf: tools for transforming and inspecting PDF files

 QPDF is a program that can be used to linearize (web-optimize),
 encrypt (password-protect), decrypt, and inspect PDF files from the
 command-line. It does these and other structural, content-preserving
 transformations on PDF files, reading a PDF file as input and
 creating a new one as output. It also provides many useful
 capabilities to developers of PDF-producing software or for people
 who just want to look at the innards of a PDF file to learn more
 about how they work.
 .
 QPDF understands PDF files that use compressed object streams
 (supported by newer PDF applications) and can convert such files into
 those that can be read with older viewers. It can also be used for
 checking PDF files for structural errors, inspecting stream contents,
 or extracting objects from PDF files. QPDF is not PDF content
 creation or viewing software -- it does not have the capability to
 create PDF files from scratch or to display PDF files.
 .
 This package includes the command-line qpdf tools. It also contains
 the documentation.

qpdf-dbgsym: debug symbols for qpdf