Hello community, here is the log from the commit of package poppler checked in at Fri Jul 11 23:20:29 CEST 2008. -------- --- GNOME/poppler/poppler.changes 2008-06-04 12:43:09.000000000 +0200 +++ poppler/poppler.changes 2008-07-02 02:50:31.260844000 +0200 @@ -1,0 +2,6 @@ +Wed Jul 2 02:58:14 CEST 2008 - maw@suse.de + +- Add poppler-pagewidgets-null.patch (bnc#404955 and + CVE-2008-2950). + +------------------------------------------------------------------- New: ---- poppler-pagewidgets-null.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ poppler.spec ++++++ --- /var/tmp/diff_new_pack.F31589/_old 2008-07-11 23:18:37.000000000 +0200 +++ /var/tmp/diff_new_pack.F31589/_new 2008-07-11 23:18:37.000000000 +0200 @@ -13,7 +13,7 @@ Name: poppler BuildRequires: gtk-doc gtk2-devel libdrm-devel libjpeg-devel libqt4-devel libxml2-devel qt-devel qt3-devel update-desktop-files zlib-devel Version: 0.8.2 -Release: 1 +Release: 2 # Actual version of poppler-data: %define poppler_data_version 0.2.0 # WARNING: After changing versions please call Re or rpmbuild to auto-update spec file: @@ -32,6 +32,8 @@ Patch: poppler-OptionalContent.patch # PATCH-FIX-UPSTREAM poppler-annot-crash.patch bnc396634 sbrabec@suse.cz -- backport of annotation crash fixes Patch1: poppler-annot-crash.patch +# PATCH-FIX-UPSTREAM poppler-pagewidgets-null.patch bnc404955 CVE-2008-2950 maw@novell.com +Patch2: poppler-pagewidgets-null.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -489,6 +491,7 @@ %setup -q %patch -p1 %patch1 -p1 +%patch2 -p1 %build ACLOCAL="aclocal -I m4" autoreconf -f -i @@ -589,6 +592,9 @@ %{_datadir}/gtk-doc/html/poppler %changelog +* Wed Jul 02 2008 maw@suse.de +- Add poppler-pagewidgets-null.patch (bnc#404955 and + CVE-2008-2950). * Wed Jun 04 2008 sbrabec@suse.cz - Updated to version 0.8.2: * Add missing return in Object.h (fixes regression in 0.8.1) ++++++ poppler-pagewidgets-null.patch ++++++ diff --git a/poppler/Page.cc b/poppler/Page.cc index b28a3ee..72a706b 100644 --- a/poppler/Page.cc +++ b/poppler/Page.cc @@ -230,7 +230,7 @@ GBool PageAttrs::readBox(Dict *dict, char *key, PDFRectangle *box) { Page::Page(XRef *xrefA, int numA, Dict *pageDict, PageAttrs *attrsA, Form *form) { Object tmp; - + pageWidgets = NULL; //Security fix ok = gTrue; xref = xrefA; num = numA; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org