[poppler] A few vulnerabilitiess in libpoppler
Albert Astals Cid
aacid at kde.org
Mon Nov 29 13:35:13 PST 2010
A Dimecres, 24 de novembre de 2010, Robert Święcki va escriure:
> On Wed, Nov 24, 2010 at 2:41 PM, Robert Święcki <robert at swiecki.net> wrote:
> >> No, you need to get openjpeg as a separate library, i'm sure that when
> >> you do the configure step it warns you that you should be using it.
> >> Anyway do all the files in that tar crash for you? Because i tried
> >> SIGSEGV.PC.(nil).CODE.1.ADDR.(nil).INSTR.[NOT_MMAPED].pdf
> >> and works perfectly for me.
> Anyway, I prepared new version of testcases tested with the newest
> poppler and libopenjpeg
Fixed all crashes that happened here and found that were poppler's fault (lots
of them were crashes inside libopenjpeg)
More information about the poppler