Skip to contentSkip to conversation

poppler: security bump to version 0.24.5

PATCH New Gustavo Zacarias 2 participants 2 messages Jan 6, 2015

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 poppler: security bump to version 0.24.5

Fixes CVE-2013-7296 - JBIG2Stream::readSegments()" Denial of Service Vulnerability.

Also add hash file.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/poppler/poppler.hash | 2 ++
 package/poppler/poppler.mk   | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)
 create mode 100644 package/poppler/poppler.hash
package/poppler/poppler.hash new file +2 -0
new file mode 100644
index 0000000..f3225bc
@@ -0,0 +1,2 @@
+# Locally calculated
+sha256	a2654910100c923c44e366242495e226db2798254f2fa2781138867348759f84	poppler-0.24.5.tar.xz
package/poppler/poppler.mk +1 -1
index a972325..2ac7e64 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-POPPLER_VERSION = 0.24.4
+POPPLER_VERSION = 0.24.5
 POPPLER_SOURCE = poppler-$(POPPLER_VERSION).tar.xz
 POPPLER_SITE = http://poppler.freedesktop.org
 POPPLER_DEPENDENCIES = fontconfig
Signature · 1 line
2.0.5
Applied
#1 lore raw

PATCH 1/1 poppler: security bump to version 0.24.5

Dear Gustavo Zacarias,

Quoted 11 lines · Gustavo Zacarias

Fixes CVE-2013-7296 - JBIG2Stream::readSegments()" Denial of Service Vulnerability.

Also add hash file.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/poppler/poppler.hash | 2 ++
 package/poppler/poppler.mk   | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)
 create mode 100644 package/poppler/poppler.hash

Applied, thanks!

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com