diff --git a/CVE-2018-19059.patch b/CVE-2018-19059.patch index 0c3d0d6..9aa86e5 100644 --- a/CVE-2018-19059.patch +++ b/CVE-2018-19059.patch @@ -20,13 +20,13 @@ index 846584a4..a8720c64 100644 - if (!fileSpec->getEmbeddedFile()->save(path)) { + auto *embFile = fileSpec->getEmbeddedFile(); + if (!embFile || !embFile->isOk()) { -+ exitCode = 3; -+ goto err2; ++ exitCode = 3; ++ goto err2; + } + if (!embFile->save(path)) { - error(errIO, -1, "Error saving embedded file as '{0:s}'", p); - exitCode = 2; - goto err2; + error(errIO, -1, "Error saving embedded file as '{0:s}'", p); + exitCode = 2; + goto err2; @@ -295,7 +300,12 @@ int main(int argc, char *argv[]) { p = path; } @@ -43,4 +43,3 @@ index 846584a4..a8720c64 100644 goto err2; -- 2.24.1 - diff --git a/poppler.spec b/poppler.spec index d90630e..d5eaf1f 100644 --- a/poppler.spec +++ b/poppler.spec @@ -3,7 +3,7 @@ Name: poppler Version: 0.67.0 -Release: 4 +Release: 5 Summary: Poppler is a PDF rendering library based on the xpdf-3.0 code base License: (GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT URL: https://poppler.freedesktop.org/ @@ -238,6 +238,12 @@ test "$(pkg-config --modversion poppler-splash)" = "%{version}" %{_mandir}/man1/* %changelog +* Mon Jan 20 2020 openEuler Buildteam - 0.67.0-5 +- Type:bugfix +- Id:NA +- SUG:NA +- DESC:fix cves + * Mon Jan 20 2020 openEuler Buildteam - 0.67.0-4 - Type:cve - Id:NA