| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
xpdf-4.01.01 fixes several vulnerabilities and problems reported by
Loginsoft, including CVE-2019-9589.
CVE-2019-9588 and CVE-2019-9587 are probably fixed as well, but it
is not clear from ChangeLog:
The PDFDoc(BaseStream) initializer wasn't working correctly.
Fixed a missing array bounds check in PSOutputDev. [Thanks to
Loginsoft for the bug report.]
^-- CVE-2019-9589
If the "U" string used for RC4 decryption is short, Adobe apparently
zero-pads it, so Xpdf now does the same.
^-- Maybe CVE-2019-9588
Pdffonts now checks more carefully for loops between objects.
^-- Looks like CVE-2019-9587
Fixed a problem parsing large real numbers. [Thanks to Loginsoft for
the bug report.]
Bug: https://bugs.gentoo.org/681112
Bug: https://bugs.gentoo.org/681140
Package-Manager: Portage-2.3.62, Repoman-2.3.12
Signed-off-by: Andrew Savchenko <bircoph@gentoo.org>
|
Andrew Savchenko
GitWeb