Hi,

sorry for the late reply, relocating can take your time.

In data venerdì 8 novembre 2013 14:32:24, hai scritto:
> Two security issues were found in the pdfseparate tool shipped by
> poppler-utils:

Luckly both of them are "minor" issues, that can be triggered just 
running pdfseparate.

None of them affects oldstable, since pdfseparate does not exist in that 
old poppler.

> CVE-2013-4473: buffer overflow
> http://cgit.freedesktop.org/poppler/poppler/diff/utils/pdfseparate.cc?
> id=b8682d868ddf7f741e93b

This has been fixed upstream in 0.24.2.

> CVE-2013-4474: format string issue
> http://cgit.freedesktop.org/poppler/poppler/commit/?id=61f79b8447c3ac8
> ab5a26e79e0c28053ffdccf75

This has been fixed upstream in 0.24.3.

-- 
Pino Toscano

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to