Bug 621092 – <app-text/qpdf-{7.0.0, 8.2.1}: three infinite loop

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Agostino Sarubbo 2017-06-07 07:07:35 UTC]

Details at ${URL}.



@maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.

[Comment 1 Christopher Díaz Riveros (RETIRED) 2017-07-26 01:12:37 UTC]

There have been reported 4 more infinite loops 

CVE-2017-11625
https://nvd.nist.gov/vuln/detail/CVE-2017-11625

CVE-2017-11627
https://nvd.nist.gov/vuln/detail/CVE-2017-11627

CVE-2017-11624
https://nvd.nist.gov/vuln/detail/CVE-2017-11624

CVE-2017-11626
https://nvd.nist.gov/vuln/detail/CVE-2017-11626


ChrisADR
Gentoo Security Padawan

[Comment 2 Christopher Díaz Riveros (RETIRED) 2017-08-01 18:43:27 UTC]

Actual upstream patches:

https://github.com/qpdf/qpdf/commit/701b518d5c56a1449825a3a37a716c58e05e1c3e
https://github.com/qpdf/qpdf/commit/afe0242b263a9e1a8d51dd81e42ab6de2e5127eb
https://github.com/qpdf/qpdf/commit/315092dd98d5230ef0efa18b294d464d0e9f79d0
https://github.com/qpdf/qpdf/commit/603f222365252f1a1e20303b3dbe52466be3053b

Gentoo Security Padawan
ChrisADR

[Comment 3 Pacho Ramos 2019-01-26 19:00:32 UTC]

fixed versions are in the tree, only stabilizing is pending

[Comment 4 Pacho Ramos 2019-03-23 23:53:15 UTC]

they were stabilized in bug 674814