CVE-2010-4654

Note

xpdf in koffice is 2.0
first patch may change API/ABI
first patch is for protection, second patch actually fixes
particular issue. Second patch is included in Lucid's poppler,
so we're not affected.

Package	Release	Status
ipe Launchpad, Ubuntu, Debian	artful	Ignored (reached end-of-life)
	bionic	Needs triage
	cosmic	Ignored (reached end-of-life)
	disco	Ignored (reached end-of-life)
	eoan	Ignored (reached end-of-life)
	focal	Needs triage
	groovy	Ignored (reached end-of-life)
	hardy	Ignored (reached end-of-life)
	hirsute	Ignored (reached end-of-life)
	impish	Needs triage
	jammy	Needs triage
	lucid	Ignored (reached end-of-life)
	maverick	Ignored (reached end-of-life)
	natty	Ignored (reached end-of-life)
	oneiric	Ignored (reached end-of-life)
	precise	Does not exist (precise was needs-triage)
	quantal	Ignored (reached end-of-life)
	raring	Ignored (reached end-of-life)
	saucy	Ignored (reached end-of-life)
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	utopic	Ignored (reached end-of-life)
	vivid	Ignored (reached end-of-life)
	wily	Ignored (reached end-of-life)
	xenial	Ignored (end of standard support, was needs-triage)
	yakkety	Ignored (reached end-of-life)
	zesty	Ignored (reached end-of-life)
koffice Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hardy	Ignored (reached end-of-life)
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	lucid	Not vulnerable (code not present)
	maverick	Not vulnerable (code not present)
	natty	Not vulnerable (code not present)
	oneiric	Not vulnerable (code not present)
	precise	Does not exist
	quantal	Does not exist
	raring	Does not exist
	saucy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
libextractor Launchpad, Ubuntu, Debian	artful	Ignored (reached end-of-life)
	bionic	Needs triage
	cosmic	Ignored (reached end-of-life)
	disco	Ignored (reached end-of-life)
	eoan	Ignored (reached end-of-life)
	focal	Needs triage
	groovy	Ignored (reached end-of-life)
	hardy	Ignored (reached end-of-life)
	hirsute	Ignored (reached end-of-life)
	impish	Needs triage
	jammy	Needs triage
	lucid	Ignored (reached end-of-life)
	maverick	Ignored (reached end-of-life)
	natty	Ignored (reached end-of-life)
	oneiric	Ignored (reached end-of-life)
	precise	Does not exist (precise was needs-triage)
	quantal	Ignored (reached end-of-life)
	raring	Ignored (reached end-of-life)
	saucy	Ignored (reached end-of-life)
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	utopic	Ignored (reached end-of-life)
	vivid	Ignored (reached end-of-life)
	wily	Ignored (reached end-of-life)
	xenial	Ignored (end of standard support, was needs-triage)
	yakkety	Ignored (reached end-of-life)
	zesty	Ignored (reached end-of-life)
poppler Launchpad, Ubuntu, Debian	artful	Not vulnerable
	bionic	Not vulnerable
	cosmic	Not vulnerable
	disco	Not vulnerable
	eoan	Not vulnerable
	focal	Not vulnerable
	groovy	Not vulnerable
	hardy	Ignored (reached end-of-life)
	hirsute	Not vulnerable
	impish	Not vulnerable
	jammy	Not vulnerable
	lucid	Not vulnerable (0.12.4-0ubuntu5.2)
	maverick	Not vulnerable (0.14.3-0ubuntu1.2)
	natty	Not vulnerable
	oneiric	Not vulnerable
	precise	Does not exist (precise was not-affected)
	quantal	Not vulnerable
	raring	Not vulnerable
	saucy	Not vulnerable
	trusty	Does not exist (trusty was not-affected)
	upstream	Released (0.14.3)
	utopic	Not vulnerable
	vivid	Not vulnerable
	wily	Not vulnerable
	xenial	Not vulnerable
	yakkety	Not vulnerable
	zesty	Not vulnerable
	Patches: upstream: http://cgit.freedesktop.org/poppler/poppler/commit/?id=8284008aa8230a92ba08d547864353d3290e9bf9 upstream: http://cgit.freedesktop.org/poppler/poppler/commit/?id=17345173
xpdf Launchpad, Ubuntu, Debian	artful	Ignored (reached end-of-life)
	bionic	Not vulnerable (code not present)
	cosmic	Not vulnerable (code not present)
	disco	Not vulnerable (code not present)
	eoan	Not vulnerable (code not present)
	focal	Does not exist
	groovy	Does not exist
	hardy	Ignored (reached end-of-life)
	hirsute	Not vulnerable (code not present)
	impish	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	lucid	Ignored (reached end-of-life)
	maverick	Ignored (reached end-of-life)
	natty	Ignored (reached end-of-life)
	oneiric	Ignored (reached end-of-life)
	precise	Does not exist (precise was needs-triage)
	quantal	Ignored (reached end-of-life)
	raring	Ignored (reached end-of-life)
	saucy	Ignored (reached end-of-life)
	trusty	Does not exist (trusty was needs-triage)
	upstream	Not vulnerable
	utopic	Ignored (reached end-of-life)
	vivid	Ignored (reached end-of-life)
	wily	Ignored (reached end-of-life)
	xenial	Ignored (end of standard support, was needs-triage)
	yakkety	Ignored (reached end-of-life)
	zesty	Ignored (reached end-of-life)

CVE-2010-4654

Medium

Status

Notes

References

Join the discussion

Canonical is offering Extended Security Maintenance

Further reading

Author	Note
jdstrand	xpdf in koffice is 2.0
mdeslaur	first patch may change API/ABI first patch is for protection, second patch actually fixes particular issue. Second patch is included in Lucid's poppler, so we're not affected.