naddy 9c8738ab34 Fix denial of service vulnerability. ...

Check sanity of the TrueType "loca" table.  Specially crafted broken
tables caused disk space exhaustion due to very large generated glyph
descriptions when attempting to fix the table.  CAN-2005-2097.

from Ubuntu Linux; ok brad@

2005-08-11 14:18:47 +00:00

..

patch-configure_in

freetype fixes, adapted from FreeBSD; ok brad@

2004-11-06 18:19:53 +00:00

patch-doc_sample-xpdfrc

install sample xpdfrc file and fix lpr usage. From: sturm@

2004-04-06 02:35:44 +00:00

patch-fofi_FoFiTrueType_cc

Fix denial of service vulnerability.

2005-08-11 14:18:47 +00:00

patch-splash_Makefile_in

upgrade to xpdf 3.00

2004-01-25 06:02:40 +00:00

patch-splash_SplashFTFont_h

freetype fixes, adapted from FreeBSD; ok brad@

2004-11-06 18:19:53 +00:00

patch-splash_SplashFTFontEngine_h

freetype fixes, adapted from FreeBSD; ok brad@

2004-11-06 18:19:53 +00:00

patch-splash_SplashFTFontFile_h

freetype fixes, adapted from FreeBSD; ok brad@

2004-11-06 18:19:53 +00:00

patch-xpdf_Catalog_cc

Chris Evans discovered numerous vulnerabilities in the xpdf package:

2004-10-23 02:24:36 +00:00

patch-xpdf_Gfx_cc

sync patches

2005-08-10 20:27:25 +00:00

patch-xpdf_GfxState_cc

sync patches

2005-08-10 20:27:25 +00:00

patch-xpdf_Makefile_in

upgrade to xpdf 3.00

2004-01-25 06:02:40 +00:00

patch-xpdf_pdfimages_cc

remove DRM bullshit.

2003-10-24 19:31:57 +00:00

patch-xpdf_pdftops_cc

upgrade to xpdf 3.00

2004-01-25 06:02:40 +00:00

patch-xpdf_pdftotext_cc

upgrade to xpdf 3.00

2004-01-25 06:02:40 +00:00

patch-xpdf_SplashOutputDev_cc

Fix denial of service vulnerability.

2005-08-11 14:18:47 +00:00

patch-xpdf_XPDFCore_cc

upgrade to xpdf 3.00

2004-01-25 06:02:40 +00:00

patch-xpdf_XPDFViewer_cc

upgrade to xpdf 3.00

2004-01-25 06:02:40 +00:00

patch-xpdf_XRef_cc

SECURITY:

2005-01-19 16:23:16 +00:00