** Changed in: poppler
Importance: Unknown = High
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to poppler in ubuntu.
https://bugs.launchpad.net/bugs/457985
Title:
poppler 0.10.5-1ubuntu2.4 regression since -1ubuntu2.2
--
** Changed in: poppler
Status: Invalid = Unknown
--
poppler 0.10.5-1ubuntu2.4 regression since -1ubuntu2.2
https://bugs.launchpad.net/bugs/457985
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to poppler in ubuntu.
--
desktop-bugs
** Changed in: poppler
Status: Unknown = Invalid
--
poppler 0.10.5-1ubuntu2.4 regression since -1ubuntu2.2
https://bugs.launchpad.net/bugs/457985
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to poppler in ubuntu.
--
desktop-bugs
** Branch linked: lp:ubuntu/dapper-security/poppler
--
poppler 0.10.5-1ubuntu2.4 regression since -1ubuntu2.2
https://bugs.launchpad.net/bugs/457985
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to poppler in ubuntu.
--
desktop-bugs
** Branch linked: lp:ubuntu/hardy-security/poppler
** Branch linked: lp:ubuntu/intrepid-security/poppler
** Branch linked: lp:ubuntu/jaunty-security/poppler
--
poppler 0.10.5-1ubuntu2.4 regression since -1ubuntu2.2
https://bugs.launchpad.net/bugs/457985
You received this bug notification
** CVE removed: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2009-3605
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2009-3605
--
poppler 0.10.5-1ubuntu2.4 regression since -1ubuntu2.2
https://bugs.launchpad.net/bugs/457985
You received this bug notification because you
Two things I forgot:
- Evince behaves correctly both with and without the poppler patch. Are there
perhaps Qt-specific parts of the patches?
- If I can find the time, I'll try to reproduce the crash with a different PDF
file. The current one is my master thesis, which I'd rather not share with
Update: OK, using pdftk I extracted a single page that is enough to
crash Okular when the poppler security patch is applied. See attachment.
** Attachment added: This PDF file crashes Okular if the aforementioned
poppler security patch is applied
Update: OK, using pdftk I extracted a single page that is enough to
crash Okular when the poppler security patch is applied. See attachment.
** Attachment added: This PDF file crashes Okular if the aforementioned
poppler security patch is applied
Sorry for attaching twice. Launchpad gave me an error the first time.
--
poppler 0.10.5-1ubuntu2.4 regression since -1ubuntu2.2
https://bugs.launchpad.net/bugs/457985
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to poppler in ubuntu.
--
** Attachment removed: This PDF file crashes Okular if the aforementioned
poppler security patch is applied
http://launchpadlibrarian.net/34136831/poppler-okular-crash.pdf
--
poppler 0.10.5-1ubuntu2.4 regression since -1ubuntu2.2
https://bugs.launchpad.net/bugs/457985
You received this bug
** Changed in: poppler (Ubuntu)
Assignee: (unassigned) = Marc Deslauriers (mdeslaur)
--
poppler 0.10.5-1ubuntu2.4 regression since -1ubuntu2.2
https://bugs.launchpad.net/bugs/457985
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to
If more testing material is desired, I came across the PDF file [1],
which also crashes Okular when poppler is patched as above. Evince is
again unaffected. Again, if the poppler patches are reverted, Okular
behaves correctly.
[1] http://katmat.math.uni-bremen.de/acc/acc.pdf (warning: 4 MB)
--
I can confirm that after upgrading poppler (kubuntu 9.04) I get a crash
with the file from http://katmat.math.uni-bremen.de/acc/acc.pdf but also
a crash that seems different (related to dbus?) with a file from
http://www.ihsa.org/initiatives/sportsMedicine/files/gatorade/Swimming-
Thanks for the pdfs. I'm looking into this now.
** Changed in: poppler (Ubuntu)
Status: New = Confirmed
--
poppler 0.10.5-1ubuntu2.4 regression since -1ubuntu2.2
https://bugs.launchpad.net/bugs/457985
You received this bug notification because you are a member of Ubuntu
Desktop Bugs,
Nuno: With the poppler patches removed, Okular behaves correctly with
your PDF as well, so I don't think the problem is unrelated.
--
poppler 0.10.5-1ubuntu2.4 regression since -1ubuntu2.2
https://bugs.launchpad.net/bugs/457985
You received this bug notification because you are a member of
I've located the regression. I'm missing the following commit in my
security backports:
http://cgit.freedesktop.org/poppler/poppler/commit/?id=5d328282da4713356fbe4283bd992ac2fc9010a2
I'm preparing updated packages to fix the issue now. They will be
published once QA has been performed.
Thanks
Marc: I downloaded the package source ( apt-get source libpoppler4 ),
then applied the patch from the git repository by creating a simple file
inside debian/patches. After compiling ( dpkg-buildpackage -rfakeroot
-uc -b ) and installing all the created .deb files, it no longer
crashes. Thanks for
** Bug watch added: KDE Bug Tracking System #211376
http://bugs.kde.org/show_bug.cgi?id=211376
** Also affects: poppler via
http://bugs.kde.org/show_bug.cgi?id=211376
Importance: Unknown
Status: Unknown
--
poppler 0.10.5-1ubuntu2.4 regression since -1ubuntu2.2
This bug was fixed in the package poppler - 0.10.5-1ubuntu2.5
---
poppler (0.10.5-1ubuntu2.5) jaunty-security; urgency=low
* SECURITY UPDATE: segfault in Okular with security update (LP: #457985)
- debian/patches/30_security_CVE-2009-3605.patch: update patch to use
20 matches
Mail list logo
