Activity log for bug #556483

Date Who What changed Old value New value Message
2010-04-06 13:03:00 Luke Faraone bug added bug
2010-04-06 13:03:15 Luke Faraone visibility private public
2010-04-06 13:03:37 Luke Faraone cve linked 2009-1188
2010-04-06 13:03:52 Luke Faraone cve linked 2009-3603
2010-04-06 13:04:11 Luke Faraone cve linked 2009-3604
2010-04-06 13:04:22 Luke Faraone cve linked 2009-3606
2010-04-06 13:04:33 Luke Faraone cve linked 2009-3608
2010-04-06 13:04:47 Luke Faraone cve linked 2009-3609
2010-04-06 13:40:09 Luke Faraone xpdf (Ubuntu): importance Undecided Wishlist
2010-04-06 13:41:11 Luke Faraone branch linked lp:~lfaraone/ubuntu/lucid/xpdf/lp556483
2010-04-06 16:45:14 Luke Faraone description Binary package hint: xpdf The following fixes several security issues, among other things. debian/changelog: xpdf (3.02-2) unstable; urgency=high [Michael Gilbert] * Fix multiple security issues (closes: #551287, #575779). - CVE-2009-1188: Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc. - CVE-2009-3603: Additional integer overflows in the SplashBitmap::SplashBitmap function. - CVE-2009-3604: Null pointer dereference in the Splash::drawImage function in Splash.cc. - CVE-2009-3606: Integer overflow in the PSOutputDev::doImageL1Sep function in PSOutputDev.cc. - CVE-2009-3608: Integer overflow in the ObjectStream::ObjectStream function in XRef.cc. - CVE-2009-3609: Integer overflow in the ImageStream::ImageStream function in Stream.cc. * Bump standards version to 3.8.4 (no changes required). * Use ${misc:Depends}. * Adopt the package (closes: #535261, #527840). [Rogério Brito] * debian/copyright: + include versioned link to the GPL. * debian/* + convert to source format "3.0 (quilt)". * debian/{control,compat}: + bump compat to 5. * debian/control: + remove dpatch build-dep and calls in debian/rules. + include Homepage field. + build-depend on unversioned automake. + build-depend on versioned lesstif. + wrap build-depends line to keep sanity. + change build-dependency on x-dev to x11proto-core-dev. (Closes: #515495). + remove debian revision from versioned build-deps. + update standards-version to 3.8.3, with no extra changes required. * debian/rules: + remove commented lines. + fix the includes for lesstif. (See below). + remove deprecated dh_desktop helper. + don't ignore errors when calling "make -i distclean". + separate configuration from package compilation to keep things tidy. + don't remove recursively things that are only files. * debian/patches: + rename 00list to series. + disable patches 40 and 41, lesstif is fixed. (Closes: #458763, #528807). + refresh enabled patches to avoid potential problems with buildds. + escape minus signs from manpages. + fix path to configuration files. Tks Andrew Price. (Closes: #424747). + flexibilize the print dialog. Tks Dmitry Oboukhov. (Closes: #408502). + implement "Fit to Height". Tks Josh Triplett. (Closes: #424178). * debian/xpdf-common.postint: + don't use command with path in maintainer script. * debian/watch: + create watch file. * debian/xpdf.desktop: + remove obsolete indication of encoding. + remove custom category "PDFViewer". * debian/xpdf-reader.menu: + update obsolete section Apps -> Applications. * debian/xpdf-reader.dirs: + remove empty dir usr/lib/menu. Tks Nelson Oliveira. (Closes: #495150). * avoid conflict with poppler-utils. Tks Luca Capello. (Closes: #558020). -- Michael Gilbert <michael.s.gilbert@gmail.com> Fri, 02 Apr 2010 17:40:49 -0400 Binary package hint: xpdf This package qualifies for a FFe since it fixes several security issues and bug fixes. debian/changelog: xpdf (3.02-2) unstable; urgency=high   [Michael Gilbert]   * Fix multiple security issues (closes: #551287, #575779).     - CVE-2009-1188: Integer overflow in the JBIG2 decoding feature in the       SplashBitmap::SplashBitmap function in SplashBitmap.cc.     - CVE-2009-3603: Additional integer overflows in the       SplashBitmap::SplashBitmap function.     - CVE-2009-3604: Null pointer dereference in the Splash::drawImage       function in Splash.cc.     - CVE-2009-3606: Integer overflow in the PSOutputDev::doImageL1Sep       function in PSOutputDev.cc.     - CVE-2009-3608: Integer overflow in the ObjectStream::ObjectStream       function in XRef.cc.     - CVE-2009-3609: Integer overflow in the ImageStream::ImageStream       function in Stream.cc.   * Bump standards version to 3.8.4 (no changes required).   * Use ${misc:Depends}.   * Adopt the package (closes: #535261, #527840).   [Rogério Brito]   * debian/copyright:     + include versioned link to the GPL.   * debian/*     + convert to source format "3.0 (quilt)".   * debian/{control,compat}:     + bump compat to 5.   * debian/control:     + remove dpatch build-dep and calls in debian/rules.     + include Homepage field.     + build-depend on unversioned automake.     + build-depend on versioned lesstif.     + wrap build-depends line to keep sanity.     + change build-dependency on x-dev to x11proto-core-dev. (Closes: #515495).     + remove debian revision from versioned build-deps.     + update standards-version to 3.8.3, with no extra changes required.   * debian/rules:     + remove commented lines.     + fix the includes for lesstif. (See below).     + remove deprecated dh_desktop helper.     + don't ignore errors when calling "make -i distclean".     + separate configuration from package compilation to keep things tidy.     + don't remove recursively things that are only files.   * debian/patches:     + rename 00list to series.     + disable patches 40 and 41, lesstif is fixed. (Closes: #458763, #528807).     + refresh enabled patches to avoid potential problems with buildds.     + escape minus signs from manpages.     + fix path to configuration files. Tks Andrew Price. (Closes: #424747).     + flexibilize the print dialog. Tks Dmitry Oboukhov. (Closes: #408502).     + implement "Fit to Height". Tks Josh Triplett. (Closes: #424178).   * debian/xpdf-common.postint:     + don't use command with path in maintainer script.   * debian/watch:     + create watch file.   * debian/xpdf.desktop:     + remove obsolete indication of encoding.     + remove custom category "PDFViewer".   * debian/xpdf-reader.menu:     + update obsolete section Apps -> Applications.   * debian/xpdf-reader.dirs:     + remove empty dir usr/lib/menu. Tks Nelson Oliveira. (Closes: #495150).   * avoid conflict with poppler-utils. Tks Luca Capello. (Closes: #558020).  -- Michael Gilbert <michael.s.gilbert@gmail.com> Fri, 02 Apr 2010 17:40:49 -0400
2010-04-06 21:18:40 Scott Kitterman xpdf (Ubuntu): status New Confirmed
2010-04-06 21:19:11 Scott Kitterman removed subscriber Ubuntu Release Team
2010-04-07 12:31:21 Launchpad Janitor xpdf (Ubuntu): status Confirmed Fix Released
2010-05-15 15:20:51 Benjamin Drung removed subscriber Ubuntu Sponsors Team