[poppler] Re: Security problems in xpdf and friends

[Ondrej Sury]

On Thu, 2006-02-16 at 20:36 +0100, Albert Astals Cid wrote:
> A Dimecres 15 Febrer 2006 21:39, Ondrej Sury va escriure:
> > On Wed, 2006-02-15 at 17:42 +0100, Martin Schulze wrote:
> > > > > I'm attaching the naked patch from Derek, of which parts may not
> > > > > apply to all packages and some parts may be applied already by
> > > > > the former patchset.
> > > >
> > > > It doesn't apply to poppler, or rather only some hunks do, but:
> > >
> > > The poppler maintainer already replied (at least I thought that
> > > he was the poppler maintainer).
> >
> > Yep, I am current poppler maintainer. 
> I doubt that since this is the first time i see you on this list ;-)

Well, it was in context being Debian package maintainer :-), but I was
too lazy to write two emails about same subject and I wanted to Cc:
poppler list as well with this patch.

> > Some parts of patch was already merged in 0.4.5 upstream release.
> > I have merged manually rest of it 
> > (some more boundaries checks) - patch attached.  Ccing poppler mailling
> > list.
> 
> Could you please open a bug so we don't forget about merging this?

Sure.

Ondrej.
-- 
Ondrej Sury <ondrej at sury.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.freedesktop.org/archives/poppler/attachments/20060217/74fd3885/attachment.pgp