[Bug 570183] New: libpoppler security upgrade breaks xpdf
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c0 Summary: libpoppler security upgrade breaks xpdf Classification: openSUSE Product: openSUSE 11.2 Version: Final Platform: x86-64 OS/Version: openSUSE 11.2 Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: daved@windclimber.id.au QAContact: qa@suse.de Found By: --- Blocker: --- Created an attachment (id=336274) --> (http://bugzilla.novell.com/attachment.cgi?id=336274) PDF file which triggers Segmentation violation User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.9.1.6) Gecko/20091206 SeaMonkey/2.0.1 After doing online update to libpoppler 0.12.0-3.7.1 (x86_64) xpdf reports segmentation violation when opening some pdf files, before opening a window. Reverting to /usr/lib64/libpoppler.so.5.0.0 distributed with the 11.2 release fixes problem. I will attach a file which triggers fault. This has been confirmed on two 64 bit machines. Reproducible: Always Steps to Reproduce: 1. upgrade libpoppler (on 64 bit machine) 2. open attached PDF file with xpdf 3. Actual Results: Segmentation fault Expected Results: file displayed -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c yang xiaoyu <xyyang@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |xyyang@novell.com AssignedTo|bnc-team-screening@forge.pr |bnc-team-gnome@forge.provo. |ovo.novell.com |novell.com -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c1 Li Bin <bili@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED CC| |bili@novell.com AssignedTo|bnc-team-gnome@forge.provo. |bili@novell.com |novell.com | --- Comment #1 from Li Bin <bili@novell.com> 2010-01-13 09:41:21 UTC --- I'd take care of it. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c2 Joachim Deguara <joachim.deguara@amd.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |joachim.deguara@amd.com --- Comment #2 from Joachim Deguara <joachim.deguara@amd.com> 2010-01-14 18:17:47 UTC --- Same here and more precisely I downgraded to version 0.12.0-3.5 of libpoppler5 and it worked. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c3 --- Comment #3 from Li Bin <bili@novell.com> 2010-01-15 07:56:46 UTC --- Done. I found the reason, this security update change some header's of xpdf-poppler used, when I build the xpdf-poppler with the latest libpoppler-devel, it works fine. You can test it from my build service for test. https://api.opensuse.org/build/home:BinLi:branches:openSUSE:11.2/standard/i5... https://api.opensuse.org/build/home:BinLi:branches:openSUSE:11.2/standard/x8... -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c4 Li Bin <bili@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO Info Provider| |thomas@novell.com --- Comment #4 from Li Bin <bili@novell.com> 2010-01-15 08:07:41 UTC --- Thomas, When update the fix from Bug #507102 - VUL-0: poppler: multiple integer overflows in "pdftops" filter (CVE-2009-0791), the xpdf-poppler also need to be updated. How do let it work? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c5 Thomas Biege <thomas@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED Info Provider|thomas@novell.com | --- Comment #5 from Thomas Biege <thomas@novell.com> 2010-01-15 08:25:41 UTC --- When we (sec-team) know the list of affected packages we just would create patchinfos for them in SWAMP. xpdf-poppler depends on poppler which means it will be rebuild automatically. Should we release xpdf-poppler? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c6 Li Bin <bili@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO Info Provider| |thomas@novell.com --- Comment #6 from Li Bin <bili@novell.com> 2010-01-15 08:39:46 UTC --- Yes, we need release the xpdf-poppler. And from Bug 569318 - libpoppler4 too old for KDE Okular in KDE SC 4.4, maybe we need also release the kdegraphics4 which depends the libpoppler-devel in openSUSE 11.1, currently I'm not 11.1 in hand, so I need to install a new to make sure about it. So do we fixed together? If not, release this first. Thanks! -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c7 Ludwig Nussel <lnussel@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED Info Provider|thomas@novell.com | --- Comment #7 from Ludwig Nussel <lnussel@novell.com> 2010-01-15 10:02:22 CET --- so the safeint patch broke binary compatibility which is not surprising and bad for a library in released distros. How did upstream fix the problems? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c8 --- Comment #8 from Li Bin <bili@novell.com> 2010-01-15 09:18:29 UTC --- Ludwig, Gabriel already submit the safeint patch into upstream from https://bugs.freedesktop.org/show_bug.cgi?id=26047 . And the upstream refuse to accept it. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c9 --- Comment #9 from Ludwig Nussel <lnussel@novell.com> 2010-01-15 10:29:44 CET --- Well, what do you expect if you submit a patch for an old version? That was not my question anyways. Since upstream doesn't use the safeint patch how does their fix look like? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c10 --- Comment #10 from Li Bin <bili@novell.com> 2010-01-15 09:38:57 UTC --- Ludwig, It don't need a patch for just rebuild the xpdf-poppler which depends the new libpoppler-devel. The upstream thought this CVE bug is a making money bug, :), so not care of it very much. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c11 --- Comment #11 from Marcus Meissner <meissner@novell.com> 2010-01-15 10:39:46 UTC --- The problem is that we should not change the ABI on our library packages. there is more than xpdf-poppler linking against poppler for instance, we have sev eral others (evince, kde4-okular, cups) ... Also the customer can have their own applications linking against poppler and we might have broken them without chance for us to fix it. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c12 Detlef Reichelt <detlef@die-mafia.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |detlef@die-mafia.de --- Comment #12 from Detlef Reichelt <detlef@die-mafia.de> 2010-01-15 11:55:58 UTC --- And some other application doesn't build with the sec update, for example: libextractor -> http://www.gnu.org/software/libextractor/ config.log: configure:19382: checking poppler/goo/gmem.h usability configure:19382: gcc -c -fno-strict-aliasing -O2 -g -m64 -fmessage-length=0 -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables conftest.c >&5 In file included from conftest.c:108: /usr/include/poppler/goo/gmem.h:47: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'SafeInt' /usr/include/poppler/goo/gmem.h:126: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'operator' Detlef -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c13 --- Comment #13 from Li Bin <bili@novell.com> 2010-01-15 15:52:47 UTC --- Detlef, I think you should use g++ instead of gcc for your issue. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c14 Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dbischof@hrz.uni-kassel.de --- Comment #14 from Marcus Meissner <meissner@novell.com> 2010-01-16 15:42:20 UTC --- *** Bug 571361 has been marked as a duplicate of this bug. *** http://bugzilla.novell.com/show_bug.cgi?id=571361 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c15 Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mgerlach@gmx.net --- Comment #15 from Marcus Meissner <meissner@novell.com> 2010-01-16 15:42:35 UTC --- *** Bug 571293 has been marked as a duplicate of this bug. *** http://bugzilla.novell.com/show_bug.cgi?id=571293 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c16 Li Bin <bili@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bili@novell.com |security-team@suse.de --- Comment #16 from Li Bin <bili@novell.com> 2010-01-18 02:53:06 UTC --- ->Security team. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c17 Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dmueller@novell.com, | |meissner@novell.com, | |pgajdos@novell.com --- Comment #17 from Marcus Meissner <meissner@novell.com> 2010-01-18 16:54:35 UTC --- cc dirk, pgajdos -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c18 --- Comment #18 from Ludwig Nussel <lnussel@novell.com> 2010-01-19 16:08:15 CET --- I'd vote for reverting the update and fix it in a better way -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c19 --- Comment #19 from Marcus Meissner <meissner@novell.com> 2010-01-19 15:14:01 UTC --- we need to at least revert the SafeInt patch. the g*alloc binary incompatible change is not acceptable. (and also these g*alloc functions are C functions, not C++, so we cannot use classes) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c20 Petr Gajdos <pgajdos@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |krahmer@novell.com, | |sbrabec@novell.com --- Comment #20 from Petr Gajdos <pgajdos@novell.com> 2010-01-19 17:49:56 UTC --- (In reply to comment #9)
my question anyways. Since upstream doesn't use the safeint patch how does their fix look like?
The problem is, that our security team wanted better fix than upstream have :-). That is why the xpdf-safe-int.patch has arisen, why is so huge and why I was convinced from the beginning this patch is not upstreamable. I suggest read bug 502974 for more informations. I have talked with sbrabec and he suggested to (carefully) consider version update for poppler, if there is no ABI change and addresses said security problem sufficiently. Alternatively (for older distributions for example), original small patch from upstream -- bug 502061, comment 2 could be backported. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c21 --- Comment #21 from Marcus Meissner <meissner@novell.com> 2010-01-20 12:51:32 UTC --- I have found a method to make the safeint patch more "safe" for this reasons, by hjust exporting the extern "C" version with normal ints and C++ variants with SafeInt. I am attaching the new patch and the diff between the two. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c22 --- Comment #22 from Marcus Meissner <meissner@novell.com> 2010-01-20 12:53:02 UTC --- Created an attachment (id=337644) --> (http://bugzilla.novell.com/attachment.cgi?id=337644) new safeint patch -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c23 --- Comment #23 from Marcus Meissner <meissner@novell.com> 2010-01-20 12:54:07 UTC --- Created an attachment (id=337646) --> (http://bugzilla.novell.com/attachment.cgi?id=337646) interdiff incremental patch to the one we released. (both for 11.2) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c24 --- Comment #24 from Marcus Meissner <meissner@novell.com> 2010-01-20 13:49:27 UTC --- That said ... Unless we can bring this patch upstream I would say that we remove it from our packages again and proceed with either smaller patches or a version upgrade. for 11.2 a version upgrade might be feasible (major version is still "5"), for older products not so easy. We would only revert the safeint patch from poppler (it can stay in the xpdfs and other non libraries). so to do: - bili: remove safe int patch from popplers and get them submitted, all opensuse and sle branches :/ so we can proceed with unbreaking the buildsystem and our customers. - bili: for 11.2 can you do test builds of a version update to 0.12.3? - did we miss any security fixes? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|security-team@suse.de |bili@novell.com -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c25 Reinhard Max <max@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |max@novell.com --- Comment #25 from Reinhard Max <max@novell.com> 2010-01-26 14:19:34 UTC --- *** Bug 573867 has been marked as a duplicate of this bug. *** http://bugzilla.novell.com/show_bug.cgi?id=573867 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c26 --- Comment #26 from Li Bin <bili@novell.com> 2010-02-02 08:14:53 UTC --- I do it now, submit it later, :) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c27 Li Bin <bili@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO Info Provider| |meissner@novell.com --- Comment #27 from Li Bin <bili@novell.com> 2010-02-02 09:53:47 UTC --- Marcus, Do we need a swampid for it? I prepare resubmit it without safe-int patch. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c28 Swamp Workflow Management <swamp@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard| |maint:running:30658 --- Comment #28 from Swamp Workflow Management <swamp@suse.com> 2010-02-02 10:16:36 UTC --- The SWAMPID for this issue is 30658. Please submit the patch and patchinfo file using this ID. (https://swamp.suse.de/webswamp/wf/30658) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c29 Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED Info Provider|meissner@novell.com | --- Comment #29 from Marcus Meissner <meissner@novell.com> 2010-02-02 10:17:36 UTC --- yes. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c30 --- Comment #30 from Li Bin <bili@novell.com> 2010-02-02 11:02:40 UTC --- Done for 11.1 and sle11. 31311 State:new Creator:BinLi When:2010-02-02T11:57:47 submit: home:BinLi:branches:openSUSE:11.1:Update/poppler -> openSUSE:11.1:Update Comment: 'Comment poppler-CVE-2009-0791-safe-int.patch(bnc#570183,swampid#30658)' 4284 State:new Creator:BinLi When:2010-02-02T12:01:44 submit: home:BinLi:branches:SUSE:SLE-11:Update/poppler -> SUSE:SLE-11:Update Comment: 'Comment poppler-safe-int.patch(bnc#570183,swampid#30658)' -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c31 --- Comment #31 from Marcus Meissner <meissner@novell.com> 2010-02-02 12:13:36 UTC --- also 11.2 please, this is where we had the original reports -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c32 --- Comment #32 from Li Bin <bili@novell.com> 2010-02-02 16:10:34 UTC --- Marcus, Done for 11.2, and I upgrade to 0.12.3, and delete some patches which were in upstream. 31346 State:new Creator:BinLi When:2010-02-02T16:57:07 submit: home:BinLi:branches:openSUSE:11.2:Update:Test/poppler -> openSUSE:11.2:Update:Test Comment: 'Update to version 0.12.3(bnc#507183,swampid#30658)' -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c33 Li Bin <bili@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bili@novell.com |security-team@suse.de --- Comment #33 from Li Bin <bili@novell.com> 2010-02-03 10:02:59 UTC --- -> Security team. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c34 --- Comment #34 from Thomas Biege <thomas@novell.com> 2010-02-03 15:41:05 UTC --- Thanks! -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c35 Christian Boltz <suse-beta@cboltz.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |suse-beta@cboltz.de Severity|Normal |Major --- Comment #35 from Christian Boltz <suse-beta@cboltz.de> 2010-02-12 01:09:20 CET --- It looks like the update has dependency problems with okular on openSUSE 11.2 - see bug 579370 for details. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c36 Thomas Biege <thomas@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|security-team@suse.de |bili@novell.com --- Comment #36 from Thomas Biege <thomas@novell.com> 2010-02-12 08:55:03 UTC --- reassigning to Bin Li. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c37 Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bili@novell.com |security-team@suse.de --- Comment #37 from Marcus Meissner <meissner@novell.com> 2010-02-12 08:57:00 UTC --- I had discussed this with Dirk and we reviewed this case ... We will be releasing an updated okular too, in the KDE 4.3.5 update. So the release of the poppler 11.2 update will just wait until ther KDE 4.3.5 upgrade. So nothing to do but wait right now. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c38 io proprioio <cadabras@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |cadabras@gmail.com --- Comment #38 from io proprioio <cadabras@gmail.com> 2010-02-15 08:06:53 UTC --- Are you saying that opensuse 11.2 users will fix the problem only if they will upgrade to kde 4.3.5? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c39 --- Comment #39 from Marcus Meissner <meissner@novell.com> 2010-02-15 09:48:59 UTC --- the poppler update will update "okular" if present on the system. it does not require the kde 4.3.5 update -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c40 --- Comment #40 from Uwe Bonnes <bon@elektron.ikp.physik.tu-darmstadt.de> 2010-02-15 11:45:29 UTC --- The answers here are very dense and not very understandable for affected users. So "the poppler update will update "okular"" means that the update has not rolled out yet? Any estimation when it will happen? This list talks about the update for over two weeks now, with xpdf in an unuable state since over a month... -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c41 --- Comment #41 from Marcus Meissner <meissner@novell.com> 2010-02-15 12:26:29 UTC --- The update has not been rolled out yet. I am sorry that its taking so long, but fixing base libraries like poppler is not easy nor fun, especially if you do serveral tries. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c42 --- Comment #42 from io proprioio <cadabras@gmail.com> 2010-02-15 12:55:35 UTC --- But why should opensuse 11.2 users wait the kde 4.3.5 upgrade if poppler patch is independent? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c43 --- Comment #43 from Marcus Meissner <meissner@novell.com> 2010-02-15 13:31:19 UTC --- we decided to do a version upgrade for poppler in 11.2. however okular (KDE PDF / Document viewer) has a requires: poppler-qt == %version on the poppler version it was built on, so the two are connected to each other. thats hte reason we need to do this in sync. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c44 Swamp Workflow Management <swamp@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:30658 |maint:running:30658 | |maint:released:11.2:30676 --- Comment #44 from Swamp Workflow Management <swamp@suse.com> 2010-02-24 15:56:15 UTC --- Update released for: libpoppler-devel, libpoppler-doc, libpoppler-glib-devel, libpoppler-glib4, libpoppler-glib4-debuginfo, libpoppler-qt2, libpoppler-qt2-debuginfo, libpoppler-qt3-devel, libpoppler-qt4-3, libpoppler-qt4-3-debuginfo, libpoppler-qt4-devel, libpoppler5, libpoppler5-debuginfo, poppler, poppler-debugsource, poppler-tools, poppler-tools-debuginfo Products: openSUSE 11.2 (debug, i586, x86_64) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c45 Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #45 from Marcus Meissner <meissner@novell.com> 2010-02-24 15:57:41 UTC --- donereelased -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c46 io proprioio <cadabras@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium Status|RESOLVED |REOPENED Platform|x86-64 |i586 Resolution|FIXED | --- Comment #46 from io proprioio <cadabras@gmail.com> 2010-02-27 12:05:29 UTC --- I updated but xpdf looks broken: it does not start any more. This is its output: xpdf: symbol lookup error: xpdf: undefined symbol: _ZN12GlobalParams23setForceNoFTAutoHintingEPc Does xpdf-poppler need an update? My xpdf-poppler is xpdf-poppler-3.02-4.3.i586 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c47 Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |FIXED --- Comment #47 from Marcus Meissner <meissner@novell.com> 2010-03-01 13:31:18 UTC --- xpdf-poppler update released -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c48 Karl Eichwalder <ke@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED --- Comment #48 from Karl Eichwalder <ke@novell.com> 2010-03-01 14:34:58 UTC --- Works for me. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c49 io proprioio <cadabras@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|VERIFIED |CLOSED --- Comment #49 from io proprioio <cadabras@gmail.com> 2010-03-06 17:43:41 UTC --- For me too. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c50 --- Comment #50 from Dave Davey <daved@windclimber.id.au> 2010-03-06 22:53:33 UTC --- Do I have to do something other than a normal on-line update? I don't get a segmentation violation any longer, but I do get this failure: /usr/bin/xpdf: symbol lookup error: /usr/bin/xpdf: undefined symbol: _ZN15SplashOutputDev18setFreeTypeHintingEi -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c51 --- Comment #51 from io proprioio <cadabras@gmail.com> 2010-03-07 10:35:03 UTC --- I just updated. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c54 Swamp Workflow Management <swamp@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:30658 |maint:running:30658 |maint:released:11.2:30676 |maint:released:11.2:30676 | |maint:released:11.1:30675 --- Comment #54 from Swamp Workflow Management <swamp@suse.com> 2010-03-11 12:27:55 UTC --- Update released for: libpoppler4 Products: openSUSE 11.1 (i586, ppc, x86_64) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c55 Swamp Workflow Management <swamp@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:30658 |maint:running:30658 |maint:released:11.2:30676 |maint:released:11.2:30676 |maint:released:11.1:30675 |maint:released:11.1:30675 | |maint:released:sle11:30677 --- Comment #55 from Swamp Workflow Management <swamp@suse.com> 2010-03-25 10:34:30 UTC --- Update released for: libpoppler-devel, libpoppler-doc, libpoppler-glib-devel, libpoppler-glib4, libpoppler-qt2, libpoppler-qt3-devel, libpoppler-qt4-3, libpoppler-qt4-devel, libpoppler4, poppler, poppler-debuginfo, poppler-debugsource, poppler-tools Products: SLE-DEBUGINFO 11 (i386, ia64, ppc64, s390x, x86_64) SLE-DESKTOP 11 (i386, x86_64) SLE-SDK 11 (i386, ia64, ppc64, s390x, x86_64) SLE-SERVER 11 (i386, ia64, ppc64, s390x, x86_64) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c Swamp Workflow Management <swamp@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:30658 |maint:released:11.2:30676 |maint:released:11.2:30676 |maint:released:11.1:30675 |maint:released:11.1:30675 | |maint:released:sle11:30677 | -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=570183 http://bugzilla.novell.com/show_bug.cgi?id=570183#c56 --- Comment #56 from Bernhard Wiedemann <bwiedemann@suse.com> --- This is an autogenerated message for OBS integration: This bug (570183) was mentioned in https://build.opensuse.org/request/show/31311 11.1 / poppler -- You are receiving this mail because: You are on the CC list for the bug.
participants (2)
-
bugzilla_noreply＠novell.com -
opensuse-bugs+bounces-385816＠opensuse.org