buildroot/package/poppler
Fabrice Fontaine 30f8cc4700 package/poppler: security bump to version 22.10.0
- Fix CVE-2022-38784: Poppler prior to and including 22.08.0 contains an
  integer overflow in the JBIG2 decoder
  (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a
  specially crafted PDF file or JBIG2 image could lead to a crash or the
  execution of arbitrary code. This is similar to the vulnerability
  described by CVE-2022-38171 in Xpdf.
- Drop patch (already in version)

https://gitlab.freedesktop.org/poppler/poppler/-/blob/poppler-22.10.0/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit bd35c0f363)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-11-05 17:49:53 +01:00
..
Config.in
poppler.hash package/poppler: security bump to version 22.10.0 2022-11-05 17:49:53 +01:00
poppler.mk package/poppler: security bump to version 22.10.0 2022-11-05 17:49:53 +01:00