Publishing details
Changelog
qpdf (8.0.2-3ubuntu0.1) bionic-security; urgency=medium
* SECURITY UPDATE: denial of service via crafted PDF file
- debian/patches/CVE-2018-18020.patch: give up reading objects with too
many consecutive errors in libqpdf/QPDFObjectHandle.cc,
qpdf/qtest/qpdf.test, qpdf/qtest/qpdf/issue-100.out.
- CVE-2018-18020
* SECURITY UPDATE: heap-based buffer overflow in Pl_ASCII85Decoder::write
- debian/patches/CVE-2021-36978.patch: fix some pipelines to be safe if
downstream write fails in libqpdf/Pl_AES_PDF.cc,
libqpdf/Pl_ASCII85Decoder.cc, libqpdf/Pl_ASCIIHexDecoder.cc,
libqpdf/Pl_Count.cc.
- CVE-2021-36978
-- Marc Deslauriers <email address hidden> Wed, 28 Jul 2021 09:13:45 -0400
Builds
Built packages
-
libqpdf-dev
development files for PDF transformation/inspection library
-
libqpdf21
runtime library for PDF transformation/inspection software
-
libqpdf21-dbgsym
debug symbols for libqpdf21
-
qpdf
tools for transforming and inspecting PDF files
-
qpdf-dbgsym
debug symbols for qpdf
Package files