8632 2005-12-13 10:05:18 +0300 SECURITY problems: CAN-2005-2097, CVE-2005-319[1-3] 2007-01-29 19:58:01 +0300 1 1 4 Development Sisyphus libpoppler unstable all Linux CLOSED FIXED P2 critical --- 1 crux zerg lav mike qa-sisyphus oldest_to_newest 33786 0 crux 2005-12-13 10:05:19 +0300 libpoppler 0.4.2-alt1 имеет следующие проблемы с безопасностью: [DoS] http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2097 [multiple integer overflows] http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3191 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3192 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3193 надо фиксить. 33787 1 1292 crux 2005-12-13 10:07:16 +0300 Created attachment 1292 CAN-2005-2097.patch Патч - фикс CAN-2005-2097.patch 33788 2 1293 crux 2005-12-13 10:10:00 +0300 Created attachment 1293 CVE-2005-3191_2_3.patch Патч, решающий проблему с CVE-2005-319[1-3] Оба патча взяты из обновления poppler, вышедшего для Ubuntu 5.10 43362 3 mike 2006-12-17 21:49:38 +0300 Судя по %changelog, обновления были: * Wed Jan 11 2006 Andrey Semenov <mitrofan@altlinux> 0.4.4-alt1 - new version * Tue Dec 13 2005 Andrey Semenov <mitrofan@altlinux> 0.4.3-alt1 - new version 43363 4 mike 2006-12-17 21:52:16 +0300 Xpdf BoF было исправлено в 0.4.3: http://secunia.com/advisories/17912/ Multi IoF были исправлены в 0.4.4: http://secunia.com/advisories/18312/ 43464 5 zerg 2006-12-18 18:44:52 +0300 При желании я могу и libpoppler-0.5.4 в updates к 3.0 бросить 43471 6 mike 2006-12-18 20:21:15 +0300 Если не внапряг и не должно ничего сломать, было бы неплохо. 43487 7 zerg 2006-12-19 12:21:07 +0300 По идее, не должно. Я пропатчил, чтоб собирался со старым cairo, но не проверял. В backports/3.0 он из-за KDE лежит. Но evince пересобрать надо, soname сменился. Если он работает, то ни одного препятствия для выкладывания вроде нет. Если не работает, то можно что-то поновее в updates положить, если мантейнер не против собрать. 43518 8 lav 2006-12-19 23:02:50 +0300 про evince - скажите только что нужно и когда. 43540 9 zerg 2006-12-20 13:49:03 +0300 (In reply to comment #8) > про evince - скажите только что нужно и когда. В backports/3.0 лежит последний poppler, нужно проверить работоспособность evince, сообщить мне, я выложу poppler в updates и сообщу, что updates готов для выкладывания evince 43541 10 zerg 2006-12-20 13:51:59 +0300 сроки без ограничений 44897 11 zerg 2007-01-29 19:58:00 +0300 Как насчет забрасывания libpoppler-0.5.4 в updates к 3.0? Я готов 1292 2005-12-13 10:07:16 +0300 2005-12-13 10:07:16 +0300 CAN-2005-2097.patch 01_CAN-2005-2097.patch text/plain 1900 crux ZGlmZiAtTnVyIHBvcHBsZXItMC4zLjMvZm9maS9Gb0ZpVHJ1ZVR5cGUuY2MgcG9wcGxlci0wLjMu My5uZXcvZm9maS9Gb0ZpVHJ1ZVR5cGUuY2MKLS0tIHBvcHBsZXItMC4zLjMvZm9maS9Gb0ZpVHJ1 ZVR5cGUuY2MJMjAwNS0wMy0wMyAyMDo0NTo1OC4wMDAwMDAwMDAgKzAxMDAKKysrIHBvcHBsZXIt MC4zLjMubmV3L2ZvZmkvRm9GaVRydWVUeXBlLmNjCTIwMDUtMDgtMDkgMTM6MDI6MjYuMDAwMDAw MDAwICswMjAwCkBAIC0xMzQzLDYgKzEzNDMsMjcgQEAKICAgICByZXR1cm47CiAgIH0KIAorICAv LyBtYWtlIHN1cmUgdGhlIGxvY2EgdGFibGUgaXMgc2FuZSAoY29ycmVjdCBsZW5ndGggYW5kIGVu dHJpZXMgYXJlCisgIC8vIGluIGJvdW5kcykKKyAgaSA9IHNlZWtUYWJsZSgibG9jYSIpOworICBp ZiAodGFibGVzW2ldLmxlbiA8IChuR2x5cGhzICsgMSkgKiAobG9jYUZtdCA/IDQgOiAyKSkgewor ICAgIHBhcnNlZE9rID0gZ0ZhbHNlOworICAgIHJldHVybjsKKyAgfQorICBmb3IgKGogPSAwOyBq IDw9IG5HbHlwaHM7ICsraikgeworICAgIGlmIChsb2NhRm10KSB7CisgICAgICBwb3MgPSAoaW50 KWdldFUzMkJFKHRhYmxlc1tpXS5vZmZzZXQgKyBqKjQsICZwYXJzZWRPayk7CisgICAgfSBlbHNl IHsKKyAgICAgIHBvcyA9IGdldFUxNkJFKHRhYmxlc1tpXS5vZmZzZXQgKyBqKjIsICZwYXJzZWRP ayk7CisgICAgfQorICAgIGlmIChwb3MgPCAwIHx8IHBvcyA+IGxlbikgeworICAgICAgcGFyc2Vk T2sgPSBnRmFsc2U7CisgICAgfQorICB9CisgIGlmICghcGFyc2VkT2spIHsKKyAgICByZXR1cm47 CisgIH0KKwogICAvLyByZWFkIHRoZSBwb3N0IHRhYmxlCiAgIHJlYWRQb3N0VGFibGUoKTsKICAg aWYgKCFwYXJzZWRPaykgewpkaWZmIC1OdXIgcG9wcGxlci0wLjMuMy9wb3BwbGVyL1NwbGFzaE91 dHB1dERldi5jYyBwb3BwbGVyLTAuMy4zLm5ldy9wb3BwbGVyL1NwbGFzaE91dHB1dERldi5jYwot LS0gcG9wcGxlci0wLjMuMy9wb3BwbGVyL1NwbGFzaE91dHB1dERldi5jYwkyMDA1LTAzLTAzIDIw OjQ2OjAxLjAwMDAwMDAwMCArMDEwMAorKysgcG9wcGxlci0wLjMuMy5uZXcvcG9wcGxlci9TcGxh c2hPdXRwdXREZXYuY2MJMjAwNS0wOC0wOSAxMzowMjoyNi4wMDAwMDAwMDAgKzAyMDAKQEAgLTYy MywxNiArNjIzLDE5IEBACiAgICAgICB9CiAgICAgICBicmVhazsKICAgICBjYXNlIGZvbnRUcnVl VHlwZToKLSAgICAgIGlmICghKGZmID0gRm9GaVRydWVUeXBlOjpsb2FkKGZpbGVOYW1lLT5nZXRD U3RyaW5nKCkpKSkgewotCWdvdG8gZXJyMjsKKyAgICAgIGlmICgoZmYgPSBGb0ZpVHJ1ZVR5cGU6 OmxvYWQoZmlsZU5hbWUtPmdldENTdHJpbmcoKSkpKSB7CisJY29kZVRvR0lEID0gKChHZng4Qml0 Rm9udCAqKWdmeEZvbnQpLT5nZXRDb2RlVG9HSURNYXAoZmYpOworCW4gPSAyNTY7CisJZGVsZXRl IGZmOworICAgICAgfSBlbHNlIHsKKwljb2RlVG9HSUQgPSBOVUxMOworCW4gPSAwOwogICAgICAg fQotICAgICAgY29kZVRvR0lEID0gKChHZng4Qml0Rm9udCAqKWdmeEZvbnQpLT5nZXRDb2RlVG9H SURNYXAoZmYpOwotICAgICAgZGVsZXRlIGZmOwogICAgICAgaWYgKCEoZm9udEZpbGUgPSBmb250 RW5naW5lLT5sb2FkVHJ1ZVR5cGVGb250KAogCQkJICAgaWQsCiAJCQkgICBmaWxlTmFtZS0+Z2V0 Q1N0cmluZygpLAogCQkJICAgZmlsZU5hbWUgPT0gdG1wRmlsZU5hbWUsCi0JCQkgICBjb2RlVG9H SUQsIDI1NikpKSB7CisJCQkgICBjb2RlVG9HSUQsIG4pKSkgewogCWVycm9yKC0xLCAiQ291bGRu J3QgY3JlYXRlIGEgZm9udCBmb3IgJyVzJyIsCiAJICAgICAgZ2Z4Rm9udC0+Z2V0TmFtZSgpID8g Z2Z4Rm9udC0+Z2V0TmFtZSgpLT5nZXRDU3RyaW5nKCkKIAkgICAgICAgICAgICAgICAgICAgICAg ICAgOiAiKHVubmFtZWQpIik7Cg== 1293 2005-12-13 10:10:00 +0300 2005-12-13 10:10:00 +0300 CVE-2005-3191_2_3.patch 04_CVE-2005-3191_2_3.patch text/plain 4715 crux ZGlmZiAtTnVyIHBvcHBsZXItMC40LjIvcG9wcGxlci9KUFhTdHJlYW0uY2MgcG9wcGxlci0wLjQu Mi5uZXcvcG9wcGxlci9KUFhTdHJlYW0uY2MKLS0tIHBvcHBsZXItMC40LjIvcG9wcGxlci9KUFhT dHJlYW0uY2MJMjAwNS0wMy0wMyAyMDo0NjowMy4wMDAwMDAwMDAgKzAxMDAKKysrIHBvcHBsZXIt MC40LjIubmV3L3BvcHBsZXIvSlBYU3RyZWFtLmNjCTIwMDUtMTItMDkgMTc6NDE6NDIuMDAwMDAw MDAwICswMTAwCkBAIC03LDYgKzcsNyBAQAogLy89PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KIAogI2luY2x1ZGUg PGNvbmZpZy5oPgorI2luY2x1ZGUgPGxpbWl0cy5oPgogCiAjaWZkZWYgVVNFX0dDQ19QUkFHTUFT CiAjcHJhZ21hIGltcGxlbWVudGF0aW9uCkBAIC02NjYsNyArNjY3LDcgQEAKICAgaW50IHNlZ1R5 cGU7CiAgIEdCb29sIGhhdmVTSVosIGhhdmVDT0QsIGhhdmVRQ0QsIGhhdmVTT1Q7CiAgIEd1aW50 IHByZWNpbmN0U2l6ZSwgc3R5bGU7Ci0gIEd1aW50IHNlZ0xlbiwgY2FwYWJpbGl0aWVzLCBjb21w LCBpLCBqLCByOworICBHdWludCBzZWdMZW4sIGNhcGFiaWxpdGllcywgblRpbGVzLCBjb21wLCBp LCBqLCByOwogCiAgIC8vLS0tLS0gbWFpbiBoZWFkZXIKICAgaGF2ZVNJWiA9IGhhdmVDT0QgPSBo YXZlUUNEID0gaGF2ZVNPVCA9IGdGYWxzZTsKQEAgLTcwMSw4ICs3MDIsMTggQEAKIAkgICAgICAg ICAgICAvIGltZy54VGlsZVNpemU7CiAgICAgICBpbWcubllUaWxlcyA9IChpbWcueVNpemUgLSBp bWcueVRpbGVPZmZzZXQgKyBpbWcueVRpbGVTaXplIC0gMSkKIAkgICAgICAgICAgICAvIGltZy55 VGlsZVNpemU7Ci0gICAgICBpbWcudGlsZXMgPSAoSlBYVGlsZSAqKWdtYWxsb2MoaW1nLm5YVGls ZXMgKiBpbWcubllUaWxlcyAqCi0JCQkJICAgICBzaXplb2YoSlBYVGlsZSkpOworICAgICAgLy8g Y2hlY2sgZm9yIG92ZXJmbG93IGJlZm9yZSBhbGxvY2F0aW5nIG1lbW9yeQorICAgICAgaWYgKGlt Zy5uWFRpbGVzIDw9IDAgfHwgaW1nLm5ZVGlsZXMgPD0gMCB8fAorICAgICAgICAgICAgICBpbWcu blhUaWxlcyA+PSBJTlRfTUFYL2ltZy5uWVRpbGVzKSB7CisgICAgICAgICAgZXJyb3IoZ2V0UG9z KCksICJCYWQgdGlsZSBjb3VudCBpbiBKUFggU0laIG1hcmtlciBzZWdtZW50Iik7CisgICAgICAg ICAgcmV0dXJuIGdGYWxzZTsKKyAgICAgIH0KKyAgICAgIG5UaWxlcyA9IGltZy5uWFRpbGVzICog aW1nLm5ZVGlsZXM7CisgICAgICBpZiAoblRpbGVzID49IElOVF9NQVgvc2l6ZW9mKEpQWFRpbGUp KSB7CisgICAgICAgZXJyb3IoZ2V0UG9zKCksICJCYWQgdGlsZSBjb3VudCBpbiBKUFggU0laIG1h cmtlciBzZWdtZW50Iik7CisgICAgICAgcmV0dXJuIGdGYWxzZTsKKyAgICAgIH0KKyAgICAgIGlt Zy50aWxlcyA9IChKUFhUaWxlICopZ21hbGxvYyhuVGlsZXMgKiBzaXplb2YoSlBYVGlsZSkpOwog ICAgICAgZm9yIChpID0gMDsgaSA8IGltZy5uWFRpbGVzICogaW1nLm5ZVGlsZXM7ICsraSkgewog CWltZy50aWxlc1tpXS50aWxlQ29tcHMgPSAoSlBYVGlsZUNvbXAgKilnbWFsbG9jKGltZy5uQ29t cHMgKgogCQkJCQkJCXNpemVvZihKUFhUaWxlQ29tcCkpOwpkaWZmIC1OdXIgcG9wcGxlci0wLjQu Mi9wb3BwbGVyL1N0cmVhbS5jYyBwb3BwbGVyLTAuNC4yLm5ldy9wb3BwbGVyL1N0cmVhbS5jYwot LS0gcG9wcGxlci0wLjQuMi9wb3BwbGVyL1N0cmVhbS5jYwkyMDA1LTA0LTI3IDIyOjU2OjE4LjAw MDAwMDAwMCArMDIwMAorKysgcG9wcGxlci0wLjQuMi5uZXcvcG9wcGxlci9TdHJlYW0uY2MJMjAw NS0xMi0wOSAxNzo0MDo1My4wMDAwMDAwMDAgKzAxMDAKQEAgLTE1LDYgKzE1LDcgQEAKICNpbmNs dWRlIDxzdGRpby5oPgogI2luY2x1ZGUgPHN0ZGxpYi5oPgogI2luY2x1ZGUgPHN0ZGRlZi5oPgor I2luY2x1ZGUgPGxpbWl0cy5oPgogI2lmbmRlZiBXSU4zMgogI2luY2x1ZGUgPHVuaXN0ZC5oPgog I2VuZGlmCkBAIC00MjAsMTMgKzQyMSwyOCBAQAogICB3aWR0aCA9IHdpZHRoQTsKICAgbkNvbXBz ID0gbkNvbXBzQTsKICAgbkJpdHMgPSBuQml0c0E7CisgIHByZWRMaW5lID0gTlVMTDsKKyAgb2sg PSBnRmFsc2U7CiAKKyAgaWYgKHdpZHRoIDw9IDAgfHwgbkNvbXBzIDw9IDAgfHwgbkJpdHMgPD0g MCB8fAorICAgICAgbkNvbXBzID49IElOVF9NQVgvbkJpdHMgfHwKKyAgICAgIHdpZHRoID49IElO VF9NQVgvbkNvbXBzL25CaXRzKSB7CisgICAgcmV0dXJuOworICB9CiAgIG5WYWxzID0gd2lkdGgg KiBuQ29tcHM7CisgIGlmIChuVmFscyAqIG5CaXRzICsgNyA8PSAwKSB7CisgICAgcmV0dXJuOwor ICB9CiAgIHBpeEJ5dGVzID0gKG5Db21wcyAqIG5CaXRzICsgNykgPj4gMzsKICAgcm93Qnl0ZXMg PSAoKG5WYWxzICogbkJpdHMgKyA3KSA+PiAzKSArIHBpeEJ5dGVzOworICBpZiAocm93Qnl0ZXMg PCAwKSB7CisgICAgcmV0dXJuOworICB9CiAgIHByZWRMaW5lID0gKEd1Y2hhciAqKWdtYWxsb2Mo cm93Qnl0ZXMpOwogICBtZW1zZXQocHJlZExpbmUsIDAsIHJvd0J5dGVzKTsKICAgcHJlZElkeCA9 IHJvd0J5dGVzOworCisgIG9rID0gZ1RydWU7CiB9CiAKIFN0cmVhbVByZWRpY3Rvcjo6flN0cmVh bVByZWRpY3RvcigpIHsKQEAgLTEwMjAsNiArMTAzNiwxMCBAQAogICAgIEZpbHRlclN0cmVhbShz dHJBKSB7CiAgIGlmIChwcmVkaWN0b3IgIT0gMSkgewogICAgIHByZWQgPSBuZXcgU3RyZWFtUHJl ZGljdG9yKHRoaXMsIHByZWRpY3RvciwgY29sdW1ucywgY29sb3JzLCBiaXRzKTsKKyAgICBpZiAo IXByZWQtPmlzT2soKSkgeworICAgICAgZGVsZXRlIHByZWQ7CisgICAgICBwcmVkID0gTlVMTDsK KyAgICB9CiAgIH0gZWxzZSB7CiAgICAgcHJlZCA9IE5VTEw7CiAgIH0KQEAgLTI5MDcsNiArMjky NywxMCBAQAogICBoZWlnaHQgPSByZWFkMTYoKTsKICAgd2lkdGggPSByZWFkMTYoKTsKICAgbnVt Q29tcHMgPSBzdHItPmdldENoYXIoKTsKKyAgaWYgKG51bUNvbXBzIDw9IDAgfHwgbnVtQ29tcHMg PiA0KSB7CisgICAgZXJyb3IoZ2V0UG9zKCksICJCYWQgbnVtYmVyIG9mIGNvbXBvbmVudHMgaW4g RENUIHN0cmVhbSIsIHByZWMpOworICAgIHJldHVybiBnRmFsc2U7CisgIH0KICAgaWYgKHByZWMg IT0gOCkgewogICAgIGVycm9yKGdldFBvcygpLCAiQmFkIERDVCBwcmVjaXNpb24gJWQiLCBwcmVj KTsKICAgICByZXR1cm4gZ0ZhbHNlOwpAQCAtMjkzMyw2ICsyOTU3LDEwIEBACiAgIGhlaWdodCA9 IHJlYWQxNigpOwogICB3aWR0aCA9IHJlYWQxNigpOwogICBudW1Db21wcyA9IHN0ci0+Z2V0Q2hh cigpOworICBpZiAobnVtQ29tcHMgPD0gMCB8fCBudW1Db21wcyA+IDQpIHsKKyAgICBlcnJvcihn ZXRQb3MoKSwgIkJhZCBudW1iZXIgb2YgY29tcG9uZW50cyBpbiBEQ1Qgc3RyZWFtIiwgcHJlYyk7 CisgICAgcmV0dXJuIGdGYWxzZTsKKyAgfQogICBpZiAocHJlYyAhPSA4KSB7CiAgICAgZXJyb3Io Z2V0UG9zKCksICJCYWQgRENUIHByZWNpc2lvbiAlZCIsIHByZWMpOwogICAgIHJldHVybiBnRmFs c2U7CkBAIC0yOTU1LDYgKzI5ODMsMTAgQEAKIAogICBsZW5ndGggPSByZWFkMTYoKSAtIDI7CiAg IHNjYW5JbmZvLm51bUNvbXBzID0gc3RyLT5nZXRDaGFyKCk7CisgIGlmIChzY2FuSW5mby5udW1D b21wcyA8PSAwIHx8IHNjYW5JbmZvLm51bUNvbXBzID4gNCkgeworICAgIGVycm9yKGdldFBvcygp LCAiQmFkIG51bWJlciBvZiBjb21wb25lbnRzIGluIERDVCBzdHJlYW0iKTsKKyAgICByZXR1cm4g Z0ZhbHNlOworICB9CiAgIC0tbGVuZ3RoOwogICBpZiAobGVuZ3RoICE9IDIgKiBzY2FuSW5mby5u dW1Db21wcyArIDMpIHsKICAgICBlcnJvcihnZXRQb3MoKSwgIkJhZCBEQ1Qgc2NhbiBpbmZvIGJs b2NrIik7CkBAIC0zMjY4LDYgKzMzMDAsMTAgQEAKICAgICBGaWx0ZXJTdHJlYW0oc3RyQSkgewog ICBpZiAocHJlZGljdG9yICE9IDEpIHsKICAgICBwcmVkID0gbmV3IFN0cmVhbVByZWRpY3Rvcih0 aGlzLCBwcmVkaWN0b3IsIGNvbHVtbnMsIGNvbG9ycywgYml0cyk7CisgICAgaWYgKCFwcmVkLT5p c09rKCkpIHsKKyAgICAgIGRlbGV0ZSBwcmVkOworICAgICAgcHJlZCA9IE5VTEw7CisgICAgfQog ICB9IGVsc2UgewogICAgIHByZWQgPSBOVUxMOwogICB9CmRpZmYgLU51ciBwb3BwbGVyLTAuNC4y L3BvcHBsZXIvU3RyZWFtLmggcG9wcGxlci0wLjQuMi5uZXcvcG9wcGxlci9TdHJlYW0uaAotLS0g cG9wcGxlci0wLjQuMi9wb3BwbGVyL1N0cmVhbS5oCTIwMDUtMDQtMjcgMjI6NTY6MTguMDAwMDAw MDAwICswMjAwCisrKyBwb3BwbGVyLTAuNC4yLm5ldy9wb3BwbGVyL1N0cmVhbS5oCTIwMDUtMTIt MDkgMTc6NDA6NTMuMDAwMDAwMDAwICswMTAwCkBAIC0yMzEsNiArMjMxLDggQEAKIAogICB+U3Ry ZWFtUHJlZGljdG9yKCk7CiAKKyAgR0Jvb2wgaXNPaygpIHsgcmV0dXJuIG9rOyB9CisKICAgaW50 IGxvb2tDaGFyKCk7CiAgIGludCBnZXRDaGFyKCk7CiAKQEAgLTI0OCw2ICsyNTAsNyBAQAogICBp bnQgcm93Qnl0ZXM7CQkJLy8gYnl0ZXMgcGVyIGxpbmUKICAgR3VjaGFyICpwcmVkTGluZTsJCS8v IGxpbmUgYnVmZmVyCiAgIGludCBwcmVkSWR4OwkJCS8vIGN1cnJlbnQgaW5kZXggaW4gcHJlZExp bmUKKyAgR0Jvb2wgb2s7CiB9OwogCiAvLy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQo=