[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

libpoppler possibly vulnerable



Package: libpoppler0
Version: 0.3.1-x
Severity: important

Hi,

there were recently some security issues in xpdf discovered
(CAN-2004-0888, CAN-2004-1125, CAN-2005-0064). According to Frank
Küster as of 21 Mar 2005 your package is vulnerable to CAN-2005-0206.
Please check if your package is still vulnerable to one of them and
fix it.
I'm filing that bug as important, cause according to
 "apt-cache rdepends libpoppler0"
no package uses your library and hence nobody is really affected.
Please raise the severity if you find your package has leaks.
  I'm attaching the patches we used to the leaks in tetex-bin.

Regards,
  Hilmar
-- 
sigmentation fault

Attachment: CAN.tar.bz2
Description: Binary data


Reply to: