Format: 1.8 Date: Wed, 26 Jun 2019 10:14:59 -0400 Source: poppler Binary: libpoppler58 libpoppler-dev libpoppler-private-dev libpoppler-glib8 libpoppler-glib-dev libpoppler-glib-doc gir1.2-poppler-0.18 libpoppler-qt4-4 libpoppler-qt4-dev libpoppler-qt5-1 libpoppler-qt5-dev libpoppler-cpp0 libpoppler-cpp-dev poppler-utils poppler-dbg Architecture: arm64 Version: 0.41.0-0ubuntu1.14 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: gir1.2-poppler-0.18 - GObject introspection data for poppler-glib libpoppler-cpp-dev - PDF rendering library -- development files (CPP interface) libpoppler-cpp0 - PDF rendering library (CPP shared library) libpoppler-dev - PDF rendering library -- development files libpoppler-glib-dev - PDF rendering library -- development files (GLib interface) libpoppler-glib-doc - PDF rendering library -- documentation for the GLib interface libpoppler-glib8 - PDF rendering library (GLib-based shared library) libpoppler-private-dev - PDF rendering library -- private development files libpoppler-qt4-4 - PDF rendering library (Qt 4 based shared library) libpoppler-qt4-dev - PDF rendering library -- development files (Qt 4 interface) libpoppler-qt5-1 - PDF rendering library (Qt 5 based shared library) libpoppler-qt5-dev - PDF rendering library -- development files (Qt 5 interface) libpoppler58 - PDF rendering library poppler-dbg - PDF rendering library -- debugging symbols poppler-utils - PDF utilities (based on Poppler) Changes: poppler (0.41.0-0ubuntu1.14) xenial-security; urgency=medium . * SECURITY UPDATE: DoS in GfxImageColorMap::getGray - debian/patches/CVE-2017-9865.patch: clear buffers in utils/HtmlOutputDev.cc, utils/ImageOutputDev.cc. - CVE-2017-9865 * SECURITY UPDATE: memory leak in GfxColorSpace::setDisplayProfile - debian/patches/CVE-2018-18897.patch: enforcing single initialization in poppler/GfxState.cc, qt5/src/poppler-qt5.h. - CVE-2018-18897 * SECURITY UPDATE: DoS via crafted PDF file - debian/patches/CVE-2018-20662.patch: check XRef's Catalog for being a Dict in utils/pdfunite.cc. - CVE-2018-20662 * SECURITY UPDATE: buffer over-read in downsample_row_box_filter - debian/patches/CVE-2019-9631-1.patch: compute correct coverage values for box filter in poppler/CairoRescaleBox.cc. - debian/patches/CVE-2019-9631-2.patch: constrain number of cycles in rescale filter in poppler/CairoRescaleBox.cc. - CVE-2019-9631 * SECURITY UPDATE: dict marking mishandling - debian/patches/CVE-2019-9903.patch: fix stack overflow on broken file in poppler/PDFDoc.cc. - CVE-2019-9903 * SECURITY UPDATE: DoS via FPE - debian/patches/CVE-2019-10018-10023.patch: check for zero in poppler/Function.cc. - CVE-2019-10018 - CVE-2019-10023 * SECURITY UPDATE: DoS via FPE - debian/patches/CVE-2019-10019.patch: check nStripes in poppler/PSOutputDev.cc. - CVE-2019-10019 * SECURITY UPDATE: DoS via FPE - debian/patches/CVE-2019-10021.patch: check nBits in poppler/Stream.cc. - CVE-2019-10021 * SECURITY UPDATE: heap-based buffer over-read - debian/patches/CVE-2019-10872.patch: restrict filling of overlapping boxes in splash/Splash.cc. - CVE-2019-10872 * SECURITY UPDATE: buffer over-read in JPXStream::init - debian/patches/CVE-2019-12293.patch: fail gracefully if not all components have the same WxH in poppler/JPEG2000Stream.cc. - CVE-2019-12293 Checksums-Sha1: 60a440baf7cc06fb13fa40307c5ffeba6e01581b 926 gir1.2-poppler-0.18-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 95f5d1230ee5cb6a944d4f40859ccad61e77ccf6 17846 gir1.2-poppler-0.18_0.41.0-0ubuntu1.14_arm64.deb d6349a640b79052040db82ebdf679c21c8eaa751 916 libpoppler-cpp-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb d3c760c07fc00c04dd6bf0af7de5dc8e199bb596 28468 libpoppler-cpp-dev_0.41.0-0ubuntu1.14_arm64.deb eef374d4b599ffadab5e1e73e5a3ab4d1ed0ba90 928 libpoppler-cpp0-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 5c17de4799a285aed096d85e8d867ee12034ec6f 23146 libpoppler-cpp0_0.41.0-0ubuntu1.14_arm64.deb 24f4efe0ae77759ef7b7234a4b5cafb9e481850a 894 libpoppler-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb b2b6850601a0cb74e0802d8c7c36692af96c61bc 658344 libpoppler-dev_0.41.0-0ubuntu1.14_arm64.deb 8c7d8d28b6381dc59c50fdcf20e3fe69462188f0 910 libpoppler-glib-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb f91c6b070ab4b5ca95b62666499c26a3a87a09ec 135216 libpoppler-glib-dev_0.41.0-0ubuntu1.14_arm64.deb d7b7ed6d4d2c5b6d81ce8135248b97fc987e4591 902 libpoppler-glib8-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb ceaed12028c4f423b3e325f3ff53d7bf04f70710 85636 libpoppler-glib8_0.41.0-0ubuntu1.14_arm64.deb 96d9848d688d61f87a19589398ba5c7d5487a75a 914 libpoppler-private-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 0bdbecda41e257b6c45b2693bb5a0a14d8e15703 165038 libpoppler-private-dev_0.41.0-0ubuntu1.14_arm64.deb 5d3579b428115daba5a873615c081c66d9b58643 900 libpoppler-qt4-4-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 1bb9d7dec1e61967dd3953e1f482759f313f1d89 93778 libpoppler-qt4-4_0.41.0-0ubuntu1.14_arm64.deb a09d62bd7183d79d103e9ab402aed068dd0b80e2 908 libpoppler-qt4-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb a65e68e9de5959c620f853cb3dc9bb760c09e4c3 133216 libpoppler-qt4-dev_0.41.0-0ubuntu1.14_arm64.deb 6ceca4828ff78677ff569f443739b129476181b7 902 libpoppler-qt5-1-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 9d3f0efd25e6ebb059bc9eb7e1710e5c907c3465 97988 libpoppler-qt5-1_0.41.0-0ubuntu1.14_arm64.deb 9844b73d8ce0692ef27b92e8ca6abb59bcc1681a 920 libpoppler-qt5-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb b362465eb6d0a11797fd5b66e6b62cb5de6d093c 138838 libpoppler-qt5-dev_0.41.0-0ubuntu1.14_arm64.deb 2a5018b20056fbcf311df87cc9d312bdd475e014 868 libpoppler58-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb ecd2fde577b47647cb9a9fcff710155d57c38cfb 629604 libpoppler58_0.41.0-0ubuntu1.14_arm64.deb 820c4c37fdf91fcc9fbf29366f80549be89ca47f 8193376 poppler-dbg_0.41.0-0ubuntu1.14_arm64.deb f127151bcc862fa1dce55335dd4745f447fa5dcc 1124 poppler-utils-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 0da304309a3ce4bf6c34ca2eea9268accb877e9c 115572 poppler-utils_0.41.0-0ubuntu1.14_arm64.deb Checksums-Sha256: f4056535ad68af6f0351f6932e96bc62fd9c0471f0826c559c9c3b07da1a80c4 926 gir1.2-poppler-0.18-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 38e427d7c5fd93b188c5bdd3e3ee4cbf69f94696c2b9db423a33f2391147cd81 17846 gir1.2-poppler-0.18_0.41.0-0ubuntu1.14_arm64.deb 875f6e8efe2b4e7d8c8a604642a465a585040470f5d9f8dd6bdf1177b1fc7f6e 916 libpoppler-cpp-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 26372c2f2d2d39d25cd7ae9eff8e0051501b37856c1efdc42717c7fc7d5d899c 28468 libpoppler-cpp-dev_0.41.0-0ubuntu1.14_arm64.deb 9b409ce7fc4042071ba3f71432c7a38bdff35f8161f38272c05ed760acf331e7 928 libpoppler-cpp0-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 73eadd3ab1a65d2dbeb2e571344d41304ecd26ca38d16606b58ed086a802510f 23146 libpoppler-cpp0_0.41.0-0ubuntu1.14_arm64.deb 1ea1ef2454f8b76a5f49d3c33492946ddb81727cf3fa7d03dd0af4c0e654e2c2 894 libpoppler-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb b9db6d8ee67c5325b8676c1787c269c89d857d6dfc87b7dc006c601730417ba5 658344 libpoppler-dev_0.41.0-0ubuntu1.14_arm64.deb 0210a12a8ba6642dda92ba5fdd6230244d2ff19f6db34e541f40c8a75345a910 910 libpoppler-glib-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 7d1762b50b8fed0b10d8894d5a7cbf9ab9a75bfc7429a361ba8a2e40a1374194 135216 libpoppler-glib-dev_0.41.0-0ubuntu1.14_arm64.deb 5f1cd2f6ef4b72db8b64333c2ddb0f179ac1ec7b5e053d89206839cacb776891 902 libpoppler-glib8-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 2f8696fc03c659c358388cd476dab83d65cbdfe5cf4aec8ca8b3f5430e021f9d 85636 libpoppler-glib8_0.41.0-0ubuntu1.14_arm64.deb 62cde4b205f0c30dedb31b27f4dae81f91a2dbdc7388d3cb225be15553289927 914 libpoppler-private-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb a4109af1fc3cea2ba9eae5d9ec644744ab4fc22f3d29d08c6ee9741dec20fcfa 165038 libpoppler-private-dev_0.41.0-0ubuntu1.14_arm64.deb efcbde38a609d3acc5c7fd9f7780c1d8cee2c2c0dd70b69a760cf1ead9732db5 900 libpoppler-qt4-4-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 9b3ab3845165e104d23fc96d5b92b0e9c5e2940ea39ef41c251a684ed5405f33 93778 libpoppler-qt4-4_0.41.0-0ubuntu1.14_arm64.deb 786e1cfd143d8fa930ce1473f45ce262e6346b51cde00c88707656d20fb54045 908 libpoppler-qt4-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb cb140e0423cfb01db9476f0c44f9095350b634fcfb0840c654e8e7deceacf774 133216 libpoppler-qt4-dev_0.41.0-0ubuntu1.14_arm64.deb ffd411ab5cd78c5836d0de8927d7a68db350378c1334c23390f86c7346712461 902 libpoppler-qt5-1-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb b492d737e0f8dccdcc6882c7f452fe38cd7020362a3402cf29e01c1aa6fd77cf 97988 libpoppler-qt5-1_0.41.0-0ubuntu1.14_arm64.deb 80a7d9b63edcd779fb2be86e0ea8d1770bffe3f17c8f3686fcdccc2673bb7ef3 920 libpoppler-qt5-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 7da5fa22bfa136166d41d8b35f15f66d8a8f474e9f5d5557ba53a88fbe9d93a0 138838 libpoppler-qt5-dev_0.41.0-0ubuntu1.14_arm64.deb 3cb8fabde485409ea74e9b843f33b49ecbf3b260e3383bb92a5284a48ea30202 868 libpoppler58-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb b8f0239c170238c22f5cc5cb8ef77733a6e0e2d4fc5bd3e86f87db9bfc994002 629604 libpoppler58_0.41.0-0ubuntu1.14_arm64.deb ccc343c7136d7ff381a5a38777bcb0b6ccc27fccef2905f4f1822744d53f471c 8193376 poppler-dbg_0.41.0-0ubuntu1.14_arm64.deb 6073567d6e22b5ec70e1c3fd198f989909508293a11c52509e77b9481b84b923 1124 poppler-utils-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 8edfca64969177bf3653febcc35d1e37fd413cfeb08462130a69222e159d9e9c 115572 poppler-utils_0.41.0-0ubuntu1.14_arm64.deb Files: 7bb70d373e16cbc1912eddbaffd75da9 926 introspection extra gir1.2-poppler-0.18-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 3bd5b316a332db4b6b0e90f11d6bc0cb 17846 introspection optional gir1.2-poppler-0.18_0.41.0-0ubuntu1.14_arm64.deb 3ce6f6a08049f45a0044f8fcb9c35212 916 libdevel extra libpoppler-cpp-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 3242b2f23f9cc801ade5a00afe1e1d1e 28468 libdevel optional libpoppler-cpp-dev_0.41.0-0ubuntu1.14_arm64.deb a21e725df77ff9528b06cf0c0f66a568 928 libs extra libpoppler-cpp0-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb a49318ba8e00960936ffce3f379cc07f 23146 libs optional libpoppler-cpp0_0.41.0-0ubuntu1.14_arm64.deb 530a60dcfb7fc29d460887c0d3f76428 894 libdevel extra libpoppler-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb d437ea285a8f31ac4db86ec983f02761 658344 libdevel optional libpoppler-dev_0.41.0-0ubuntu1.14_arm64.deb 78bb8d09e8cad43ff828b1ccf382571f 910 libdevel extra libpoppler-glib-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb e7347e082d5c1440e2233c822118b178 135216 libdevel optional libpoppler-glib-dev_0.41.0-0ubuntu1.14_arm64.deb ba428ba8e966f26a36da02d878f85873 902 libs extra libpoppler-glib8-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb fbf27ed557ebee638e646684c9f2cdcc 85636 libs optional libpoppler-glib8_0.41.0-0ubuntu1.14_arm64.deb 4fba681c3b2cd7cec3ec18a89c1ffd1d 914 libdevel extra libpoppler-private-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb efbf2376e6a8612e97e32e866a7c21ce 165038 libdevel optional libpoppler-private-dev_0.41.0-0ubuntu1.14_arm64.deb 15a971198a8292bd3da39734f65dba7e 900 libs extra libpoppler-qt4-4-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb b27ad31024add419e3ab0126085aeed7 93778 libs optional libpoppler-qt4-4_0.41.0-0ubuntu1.14_arm64.deb fcdcaa36b755ff74f4facb062030382a 908 libdevel extra libpoppler-qt4-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb c826289eaabb0a17d9388b645b02c7e3 133216 libdevel optional libpoppler-qt4-dev_0.41.0-0ubuntu1.14_arm64.deb e7dd28cad6b06a79236e6c8118eda0c0 902 libs extra libpoppler-qt5-1-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 5b9edf711faa1b2b1e8de81ed44a6589 97988 libs optional libpoppler-qt5-1_0.41.0-0ubuntu1.14_arm64.deb 0665988c5721f6cb074284f134fa3030 920 libdevel extra libpoppler-qt5-dev-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 8254a515e596504e75ab7a25047cc24f 138838 libdevel optional libpoppler-qt5-dev_0.41.0-0ubuntu1.14_arm64.deb fd236e7deecdc1ae9eda5e1779d64d9e 868 libs extra libpoppler58-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 773e1886c84feac7d60786f6facc87fb 629604 libs optional libpoppler58_0.41.0-0ubuntu1.14_arm64.deb 0fe373fe6553e426119891642bfdb846 8193376 debug extra poppler-dbg_0.41.0-0ubuntu1.14_arm64.deb e084c849baae21f87d2224300664ad19 1124 utils extra poppler-utils-dbgsym_0.41.0-0ubuntu1.14_arm64.ddeb 20e17f1dd71b73c26d22e2141ee1b998 115572 utils optional poppler-utils_0.41.0-0ubuntu1.14_arm64.deb Original-Maintainer: Loic Minier