Format: 1.8 Date: Wed, 26 Jun 2019 09:59:06 -0400 Source: poppler Binary: libpoppler73 libpoppler-dev libpoppler-private-dev libpoppler-glib8 libpoppler-glib-dev libpoppler-glib-doc gir1.2-poppler-0.18 libpoppler-qt5-1 libpoppler-qt5-dev libpoppler-cpp0v5 libpoppler-cpp-dev poppler-utils Architecture: arm64 Version: 0.62.0-2ubuntu2.9 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: gir1.2-poppler-0.18 - GObject introspection data for poppler-glib libpoppler-cpp-dev - PDF rendering library -- development files (CPP interface) libpoppler-cpp0v5 - PDF rendering library (CPP shared library) libpoppler-dev - PDF rendering library -- development files libpoppler-glib-dev - PDF rendering library -- development files (GLib interface) libpoppler-glib-doc - PDF rendering library -- documentation for the GLib interface libpoppler-glib8 - PDF rendering library (GLib-based shared library) libpoppler-private-dev - PDF rendering library -- private development files libpoppler-qt5-1 - PDF rendering library (Qt 5 based shared library) libpoppler-qt5-dev - PDF rendering library -- development files (Qt 5 interface) libpoppler73 - PDF rendering library poppler-utils - PDF utilities (based on Poppler) Changes: poppler (0.62.0-2ubuntu2.9) bionic-security; urgency=medium . * SECURITY UPDATE: memory leak in GfxColorSpace::setDisplayProfile - debian/patches/CVE-2018-18897.patch: enforcing single initialization in poppler/GfxState.cc, qt5/src/poppler-qt5.h. - CVE-2018-18897 * SECURITY UPDATE: DoS via crafted PDF file - debian/patches/CVE-2018-20662.patch: check XRef's Catalog for being a Dict in utils/pdfunite.cc. - CVE-2018-20662 * SECURITY UPDATE: buffer over-read in downsample_row_box_filter - debian/patches/CVE-2019-9631-1.patch: compute correct coverage values for box filter in poppler/CairoRescaleBox.cc. - debian/patches/CVE-2019-9631-2.patch: constrain number of cycles in rescale filter in poppler/CairoRescaleBox.cc. - CVE-2019-9631 * SECURITY UPDATE: dict marking mishandling - debian/patches/CVE-2019-9903.patch: fix stack overflow on broken file in poppler/PDFDoc.cc. - CVE-2019-9903 * SECURITY UPDATE: heap-based buffer over-read - debian/patches/CVE-2019-10872.patch: restrict filling of overlapping boxes in splash/Splash.cc. - CVE-2019-10872 * SECURITY UPDATE: buffer over-read in JPXStream::init - debian/patches/CVE-2019-12293.patch: fail gracefully if not all components have the same WxH in poppler/JPEG2000Stream.cc. - CVE-2019-12293 Checksums-Sha1: 5e88093ca004d312529fcf2e3b5fbefb0f2e93b9 18484 gir1.2-poppler-0.18_0.62.0-2ubuntu2.9_arm64.deb eb1a4d33a2f912b2ea59b68555e420c3b4133f5f 8676 libpoppler-cpp-dev_0.62.0-2ubuntu2.9_arm64.deb c283043b6146287dd8dcb6356cdcc9549addcee0 454368 libpoppler-cpp0v5-dbgsym_0.62.0-2ubuntu2.9_arm64.ddeb c24f7c291523c0aeecb4ab20b9bb576b255bc222 24144 libpoppler-cpp0v5_0.62.0-2ubuntu2.9_arm64.deb 2107688799b61d1338d48082e9f94be5e42d74d3 4616 libpoppler-dev_0.62.0-2ubuntu2.9_arm64.deb 8236231383761db70b68f5991e640fa65fbba17c 47712 libpoppler-glib-dev_0.62.0-2ubuntu2.9_arm64.deb e73a6c05dc71524df716108f174701f12567cbc6 863560 libpoppler-glib8-dbgsym_0.62.0-2ubuntu2.9_arm64.ddeb 10914c3a11d9a7625e4183c9519f51be1517837f 89168 libpoppler-glib8_0.62.0-2ubuntu2.9_arm64.deb 6df874bbc8059a4fec3b6822a6c8cfdf7a4201ed 169080 libpoppler-private-dev_0.62.0-2ubuntu2.9_arm64.deb ab3f30c1f5e7e58641d7a4645b7c76e0baa153b7 2855240 libpoppler-qt5-1-dbgsym_0.62.0-2ubuntu2.9_arm64.ddeb a6d17dfe8e8323db76ddb59b6e021163c3fa0fea 121580 libpoppler-qt5-1_0.62.0-2ubuntu2.9_arm64.deb 7d9d77d5922c3a97fe46e2171a2d8e944c030548 32284 libpoppler-qt5-dev_0.62.0-2ubuntu2.9_arm64.deb 0295ecf20630912847afa5be3f8759eaa50f9f30 3030916 libpoppler73-dbgsym_0.62.0-2ubuntu2.9_arm64.ddeb d11e91b17e2e4ff2c7f45831426c028a664a3bcd 680676 libpoppler73_0.62.0-2ubuntu2.9_arm64.deb a25dd2aefc3bd8fef740a058ea3e89e142a9a9bd 1146116 poppler-utils-dbgsym_0.62.0-2ubuntu2.9_arm64.ddeb f765bc70f5bc52e174a20581ebd9e6cad83f5376 133448 poppler-utils_0.62.0-2ubuntu2.9_arm64.deb 956c97351d7b9b90748a68311999801bc182ee9e 18997 poppler_0.62.0-2ubuntu2.9_arm64.buildinfo Checksums-Sha256: 4f256799bbeed472255259f4fdb1920a08db7c50d621fff54d92d64a01ddc8db 18484 gir1.2-poppler-0.18_0.62.0-2ubuntu2.9_arm64.deb 004a8de5202c83b07582caa68c7708aa50b290a633a7be576acc41e946ed7aef 8676 libpoppler-cpp-dev_0.62.0-2ubuntu2.9_arm64.deb 8c2302de999eb490a5907107b9a3773c83d79714da05183f3996a7f197ce8234 454368 libpoppler-cpp0v5-dbgsym_0.62.0-2ubuntu2.9_arm64.ddeb ef206dce92b915ababd7032cdb87d148a65cd2a795d370542e48943560981212 24144 libpoppler-cpp0v5_0.62.0-2ubuntu2.9_arm64.deb 08128ff7409277de1f795950e6f39446c0c5badcf51d131dc029baae48618b54 4616 libpoppler-dev_0.62.0-2ubuntu2.9_arm64.deb d32b7d7b3f11baf4c50d91eb414e10a285ac1a8309aee97e7270d456f4a35b20 47712 libpoppler-glib-dev_0.62.0-2ubuntu2.9_arm64.deb 0c0967836cf7f26fe63ed0cb8ba05333707b6e4de5fbc0232c809994513efcf7 863560 libpoppler-glib8-dbgsym_0.62.0-2ubuntu2.9_arm64.ddeb c5f8f1202f9510d8481b852f6ef7c7feef4d1a936dd322f15c4820330f95a488 89168 libpoppler-glib8_0.62.0-2ubuntu2.9_arm64.deb 82c92a2ae3055a6b3f3202de698f9913d7c8c4152e922d23d3ca7cb4807babad 169080 libpoppler-private-dev_0.62.0-2ubuntu2.9_arm64.deb 262b6be7eca1fe41356c16248877c04fee539ed02c780c0ffdaec9ca96d9ac4a 2855240 libpoppler-qt5-1-dbgsym_0.62.0-2ubuntu2.9_arm64.ddeb d86fd5d390e5635488c69416c04849436044edf8763b89e495de8b11fffcd954 121580 libpoppler-qt5-1_0.62.0-2ubuntu2.9_arm64.deb d1bfbe9a8a789b2260d0e6137d6c762480ae37ecf5402609d0bc9aa96656fe47 32284 libpoppler-qt5-dev_0.62.0-2ubuntu2.9_arm64.deb 5bb49e19958261d99cdf84a0a51cf62a2419eb1aec2bdc0f66dc7251f6de5b2a 3030916 libpoppler73-dbgsym_0.62.0-2ubuntu2.9_arm64.ddeb d991d90e351cd1465614990e03928a962dcfd2ec7e9984da54ae7dce439a96c7 680676 libpoppler73_0.62.0-2ubuntu2.9_arm64.deb 3e0b6b046edc84d4f41b94fbd597b939d1f40270e7a33d755f7fc5a03df95dff 1146116 poppler-utils-dbgsym_0.62.0-2ubuntu2.9_arm64.ddeb 8604960baf224013841fa23d7810a6f042e30fe232c5082b0d2a2a9c6acda08b 133448 poppler-utils_0.62.0-2ubuntu2.9_arm64.deb 41d2e2885491bfe56c142020781a5e425b2b4bf3021368b88d8ddaf0281dad8c 18997 poppler_0.62.0-2ubuntu2.9_arm64.buildinfo Files: 1f40827466e37f2be0bcb5fcba4dae38 18484 introspection optional gir1.2-poppler-0.18_0.62.0-2ubuntu2.9_arm64.deb 55ada364e64c3e8e93c26d3a4e445f34 8676 libdevel optional libpoppler-cpp-dev_0.62.0-2ubuntu2.9_arm64.deb 5880296f60c5ac855e8b62f5b26eec1a 454368 debug optional libpoppler-cpp0v5-dbgsym_0.62.0-2ubuntu2.9_arm64.ddeb 337166e1f8060cc5bec6bda0b5f1d498 24144 libs optional libpoppler-cpp0v5_0.62.0-2ubuntu2.9_arm64.deb 4d312eb6c0c5d8503856f275c77a4c36 4616 libdevel optional libpoppler-dev_0.62.0-2ubuntu2.9_arm64.deb 8ec1eee3ec6d6d5d622275f6de0cdbf2 47712 libdevel optional libpoppler-glib-dev_0.62.0-2ubuntu2.9_arm64.deb 4a69dde7894aacb615d044dd5566df4b 863560 debug optional libpoppler-glib8-dbgsym_0.62.0-2ubuntu2.9_arm64.ddeb e4061c3ec93895d30a35f752413136cd 89168 libs optional libpoppler-glib8_0.62.0-2ubuntu2.9_arm64.deb 82eec8c289ae447d22afb50781549880 169080 libdevel optional libpoppler-private-dev_0.62.0-2ubuntu2.9_arm64.deb 082a3e48b3e8836e55ebf5a9a7c2502d 2855240 debug optional libpoppler-qt5-1-dbgsym_0.62.0-2ubuntu2.9_arm64.ddeb a0033cb750684073c378a6d6474f9b70 121580 libs optional libpoppler-qt5-1_0.62.0-2ubuntu2.9_arm64.deb 9df5f1f0e2bed4d2dade5c1e6ea8374c 32284 libdevel optional libpoppler-qt5-dev_0.62.0-2ubuntu2.9_arm64.deb 84b7eef6d38a9bb7c7a503fd313e3a46 3030916 debug optional libpoppler73-dbgsym_0.62.0-2ubuntu2.9_arm64.ddeb 1f89ce77c24966ad09fbc58236d18f67 680676 libs optional libpoppler73_0.62.0-2ubuntu2.9_arm64.deb c88672dd490fb365338594cfccd7b406 1146116 debug optional poppler-utils-dbgsym_0.62.0-2ubuntu2.9_arm64.ddeb 4be3041d2bbd60f5e2ccaefa0d09b12b 133448 utils optional poppler-utils_0.62.0-2ubuntu2.9_arm64.deb 4650ffbecfcbaa78f9bc844c7b5930e0 18997 devel optional poppler_0.62.0-2ubuntu2.9_arm64.buildinfo Original-Maintainer: Debian freedesktop.org maintainers