lp:ubuntu/gutsy-security/koffice

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

36. By Kees Cook on 2008-04-15

* SECURITY UPDATE: arbitrary code execution via malicious embedded fonts.
* debian/patches/40_pdf2-embedded-font-fixes.diff: stronger type-checking
  added.
* References
  CVE-2008-1693

35. By Jonathan Riddell on 2007-11-07

* SECURITY UPDATE: multiple xpdf based vulnerabilities
* Remotely supplied pdf files can be used to disrupt the koffice PDF
  import filter on the client machine and possibly execute arbitrary code.
* Add debian/patches/kubuntu_02_xpdf2-CVE-2007-4352-5392-5393.diff
  edits filters/kword/pdf/xpdf/xpdf/Stream.cc and .h
* References
  CVE-2007-4352
  CVE-2007-5392
  CVE-2007-5393
  http://www.kde.org/info/security/advisory-20071107-1.txt

34. By Steve Kowalik on 2007-09-06

* Rebuild for the libpoppler1 -> libpopper2 transistion.
* Munge Maintainer field as per spec.

33. By Jonathan Riddell on 2007-08-28

Add build-dep on libpqxx-dev

32. By Jonathan Riddell on 2007-08-02

* SECURITY UPDATE: xpdf buffer overflow
  kpdf, the KDE pdf viewer, shares code with xpdf. xpdf contains
  a vulnerability that can cause a stack based buffer overflow
  via a PDF file that exploits an integer overflow in
  StreamPredictor::StreamPredictor().
* Add kubuntu_01_xpdf-CVE-2007-3387.diff
  fixes input data check in kpdf/xpdf/xpdf/Stream.cc
* References
  http://www.kde.org/info/security/advisory-20070730-1.txt
  CVE-2007-3387

31. By Jonathan Riddell on 2007-06-08

Add build-dep on libpoppler-qt-dev

30. By Jonathan Riddell on 2007-06-01

* New upstream release
* Build-dep on libexif-dev

29. By Jonathan Riddell on 2007-05-31

* Merge with Debian, remaining changes:
 - don't build-dep on libpqxx-dev or graphicsmagick, in universe

28. By Sarah Kowalik on 2007-05-25

Rebuild due to libpoppler1-qt -> libpoppler-qt1 transition

27. By Jonathan Riddell on 2007-02-13

New upstream release