CVE-2010-4654

Note

xpdf in koffice is 2.0
first patch may change API/ABI
first patch is for protection, second patch actually fixes
particular issue. Second patch is included in Lucid's poppler,
so we're not affected.

Package	Release	Status
ipe Launchpad, Ubuntu, Debian	Upstream	Needs triage

	Ubuntu 21.04 (Hirsute Hippo)	Needs triage
	Ubuntu 20.10 (Groovy Gorilla)	Needs triage
	Ubuntu 20.04 LTS (Focal Fossa)	Needs triage
	Ubuntu 18.04 LTS (Bionic Beaver)	Needs triage
	Ubuntu 16.04 ESM (Xenial Xerus)	Ignored (end of standard support, was needs-triage)
	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist (trusty was needs-triage)
koffice Launchpad, Ubuntu, Debian	Upstream	Needs triage

	Ubuntu 21.04 (Hirsute Hippo)	Does not exist
	Ubuntu 20.10 (Groovy Gorilla)	Does not exist
	Ubuntu 20.04 LTS (Focal Fossa)	Does not exist
	Ubuntu 18.04 LTS (Bionic Beaver)	Does not exist
	Ubuntu 16.04 ESM (Xenial Xerus)	Does not exist
	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist
libextractor Launchpad, Ubuntu, Debian	Upstream	Needs triage

	Ubuntu 21.04 (Hirsute Hippo)	Needs triage
	Ubuntu 20.10 (Groovy Gorilla)	Needs triage
	Ubuntu 20.04 LTS (Focal Fossa)	Needs triage
	Ubuntu 18.04 LTS (Bionic Beaver)	Needs triage
	Ubuntu 16.04 ESM (Xenial Xerus)	Ignored (end of standard support, was needs-triage)
	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist (trusty was needs-triage)
poppler Launchpad, Ubuntu, Debian	Upstream	Released (0.14.3)

	Ubuntu 21.04 (Hirsute Hippo)	Not vulnerable
	Ubuntu 20.10 (Groovy Gorilla)	Not vulnerable
	Ubuntu 20.04 LTS (Focal Fossa)	Not vulnerable
	Ubuntu 18.04 LTS (Bionic Beaver)	Not vulnerable
	Ubuntu 16.04 ESM (Xenial Xerus)	Not vulnerable
	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist (trusty was not-affected)
	Patches: Upstream: http://cgit.freedesktop.org/poppler/poppler/commit/?id=8284008aa8230a92ba08d547864353d3290e9bf9 Upstream: http://cgit.freedesktop.org/poppler/poppler/commit/?id=17345173
xpdf Launchpad, Ubuntu, Debian	Upstream	Not vulnerable

	Ubuntu 21.04 (Hirsute Hippo)	Not vulnerable (code not present)
	Ubuntu 20.10 (Groovy Gorilla)	Does not exist
	Ubuntu 20.04 LTS (Focal Fossa)	Does not exist
	Ubuntu 18.04 LTS (Bionic Beaver)	Not vulnerable (code not present)
	Ubuntu 16.04 ESM (Xenial Xerus)	Ignored (end of standard support, was needs-triage)
	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist (trusty was needs-triage)

CVE-2010-4654

Medium

Status

Notes

References

Join the discussion

Canonical is offering Extended Security Maintenance

Further reading

Author	Note
jdstrand	xpdf in koffice is 2.0
mdeslaur	first patch may change API/ABI first patch is for protection, second patch actually fixes particular issue. Second patch is included in Lucid's poppler, so we're not affected.