Publishing details

Changelog

qpdf (8.0.2-3ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: denial of service via crafted PDF file
    - debian/patches/CVE-2018-18020.patch: give up reading objects with too
      many consecutive errors in libqpdf/QPDFObjectHandle.cc,
      qpdf/qtest/qpdf.test, qpdf/qtest/qpdf/issue-100.out.
    - CVE-2018-18020
  * SECURITY UPDATE: heap-based buffer overflow in Pl_ASCII85Decoder::write
    - debian/patches/CVE-2021-36978.patch: fix some pipelines to be safe if
      downstream write fails in libqpdf/Pl_AES_PDF.cc,
      libqpdf/Pl_ASCII85Decoder.cc, libqpdf/Pl_ASCIIHexDecoder.cc,
      libqpdf/Pl_Count.cc.
    - CVE-2021-36978

 -- Marc Deslauriers <email address hidden>  Wed, 28 Jul 2021 09:13:45 -0400

Available diffs

Builds

Built packages

Package files