120985 2006-01-30 14:21 0000 app-text/{poppler|xpdf} second Xpdf round this year aka splash handling heap overflow (CVE-2006-0301) 2006-11-11 19:54:26 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All Linux RESOLVED FIXED https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179046 B2 [glsa] jaervosz P2 normal --- 1 jaervosz@gentoo.org security@gentoo.org mips@gentoo.org printing@gentoo.org wolf31o2@gentoo.org jaervosz@gentoo.org 2006-01-30 14:21:07 0000 PDF splash handling heap overflow Dirk Mueller told vendor-sec about a buffer overflow issue in the xpdf codebase when handling splash images. jaervosz@gentoo.org 2006-01-30 14:26:11 0000 Printing/Gnome please provide updated ebuild. jaervosz@gentoo.org 2006-01-31 02:37:24 0000 Further details here: https://bugzilla.novell.com/show_bug.cgi?id=141242 jaervosz@gentoo.org 2006-01-31 02:39:12 0000 *** Bug 120451 has been marked as a duplicate of this bug. *** genstef@gentoo.org 2006-02-03 11:14:02 0000 latest kpdf-3.5.1 uses poppler now thanks to flameeyes the bug was fixed in poppler-0.5.0-r3 and gpdf users should upgrade to evince whihc uses kpdf ;) For xpdf I think we should patch it to use poppler, because no one of printing cares about it. genstef@gentoo.org 2006-02-03 15:43:20 0000 gpdf seems to have beeen fixed independantly. poppler has been fixed for this bug. xpdf has been fixed for this bug. app-text/poppler-0.5.0-r4 and app-text/xpdf-3.01-r7 need to go stable for this bug. jaervosz@gentoo.org 2006-02-04 00:50:43 0000 Gpdf is not fixed. Handling it on bug #120985 to start stable marking here. Arches please test and mark stable. killerfox@gentoo.org 2006-02-04 08:19:24 0000 Stable on hppa. There's a depends problem with ~s390 while commiting xpdf. jaervosz@gentoo.org 2006-02-04 10:42:39 0000 Sorry, correct gpdf bug #121511 genstef@gentoo.org 2006-02-04 17:04:01 0000 Please also mark poppler-bindings-0.5.0 stable, both poppler and poppler-bindings should have the same stable-version. List of what needs to go stable: app-text/poppler-0.5.0-r4 app-text/poppler-bindings-0.5.0 app-text/xpdf-3.01-r7 weeve@gentoo.org 2006-02-04 18:05:25 0000 Packages in comment #9 stable on SPARC. blubb@gentoo.org 2006-02-05 02:54:18 0000 all three stable on amd64 yoswink@gentoo.org 2006-02-05 08:41:24 0000 alpha stable dertobi123@gentoo.org 2006-02-05 11:44:33 0000 ppc stable corsair@gentoo.org 2006-02-05 23:41:56 0000 stable on ppc64 halcy0n@gentoo.org 2006-02-06 05:59:05 0000 x86 done jer@gentoo.org 2006-02-08 19:29:30 0000 (In reply to comment #9) > Please also mark poppler-bindings-0.5.0 stable, both poppler and > poppler-bindings should have the same stable-version. > List of what needs to go stable: > > app-text/poppler-0.5.0-r4 > app-text/poppler-bindings-0.5.0 > app-text/xpdf-3.01-r7 Readding hppa. :-\ killerfox@gentoo.org 2006-02-09 02:13:10 0000 Stabalized also poppler-bindings. Because of hppa was not readded by bug-change so there is this delay. koon@gentoo.org 2006-02-12 09:40:35 0000 GLSA 200602-04