Re: [libextractor] Patches for libextractor

[Christian Grothoff]

Dear Pavol,

I was not aware of those XPDF issues at the time of release.  I've applied the 
patches and am releasing 0.5.19a right now.  Thanks for passing those on.

All: note that these issues only impact you if you compiled LE 
with --enable-xpdf (and you got a warning about running code with a bad 
security track record by configure in that case).  So the issues do not 
impact anyone running the "default" version of the package. 

Best,

Christian

On Thursday 10 January 2008, Pavol Rusnak wrote:
> Hello!
>
> I see you released new version of libextractor (0.5.19). Unfortunately
> it does not contain security fixes against XPSF from CVE. I'm attaching
> them. I'll also attach one simple patch that adds missing includes ...