shield
Security update for poppler
SUSE-SLE-SERVER-12-SP5-2023-2907
This update for poppler fixes the following issues: - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272). - CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc (bsc#1149635). - CVE-2019-12293: Fixed heap-based buffer over-read in JPXStream:init in JPEG2000Stream.cc (bsc#1136105). - CVE-2018-20481: Fixed memory leak in GfxColorSpace:setDisplayProfile in GfxState.cc (bsc#1114966). - CVE-2019-7310: Fixed a heap-based buffer over-read allows remote attackers to cause DOS via a special crafted PDF (bsc#1124150). - CVE-2018-13988: Fixed buffer overflow in pdfunite (bsc#1102531). - CVE-2018-16646: Fixed infinite recursion in poppler/Parser.cc:Parser::getObj() function (bsc#1107597). - CVE-2018-19058: Fixed reachable abort in Object.h leading to denial of service (bsc#1115187). - CVE-2018-19059: Fixed out-of-bounds read in EmbFile:save2 in FileSpec.cc leading to denial of service (bsc#1115186). - CVE-2018-19060: Fixed NULL pointer dereference in goo/GooString.h leading to denial of service (bsc#1115185). - CVE-2018-19149: Fixed NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment (bsc#1115626). - CVE-2017-18267: Fixed denial of service (infinite recursion) via a crafted PDF file (bsc#1092945). - CVE-2018-20650: Fixed issue where a reachable Object in dictLookup assertion allows attackers to cause DOS (bsc#1120939).
-
Release DateJul 20 2023
-
ReferencesBugzilla: 1115186, 1149635, 1199272, 1115187, 1102531, 1136105, 1115185, 1120939, 1115626, 1092945, 1114966, 1107597, 1124150
CVEs: CVE-2018-19060, CVE-2018-13988, CVE-2018-19149, CVE-2018-20481, CVE-2018-21009, CVE-2018-16646, CVE-2019-12293, CVE-2018-20650, CVE-2017-18267, CVE-2022-27337, CVE-2018-19059, CVE-2018-18897, CVE-2018-19058, CVE-2019-7310 -
Typesecurity
-
Severitymoderate
cloud_download Downloads
SUSE Linux Enterprise Server 12.5 aarch64
-
Packageslibpoppler-glib8
PDF Rendering Library - GLib Wrapperlibpoppler-qt4-40.43.0-16.25.1lock rpm0.43.0-16.25.1lock rpm
PDF Rendering Library - Qt4 Wrapperlibpoppler600.43.0-16.25.1lock rpm0.43.0-16.25.1lock rpm
PDF Rendering Librarypoppler0.43.0-16.25.1lock rpm0.43.0-16.25.1lock rpm
PDF Rendering Librarypoppler-qt0.43.0-16.25.1lock src
PDF Rendering Librarypoppler-tools0.43.0-16.25.1lock src
PDF Rendering Library Tools0.43.0-16.25.1lock rpm0.43.0-16.25.1lock rpm
SUSE Linux Enterprise Server 12.5 ppc64le
-
Packageslibpoppler-glib8
PDF Rendering Library - GLib Wrapperlibpoppler-qt4-40.43.0-16.25.1lock rpm
PDF Rendering Library - Qt4 Wrapperlibpoppler600.43.0-16.25.1lock rpm
PDF Rendering Librarypoppler0.43.0-16.25.1lock rpm
PDF Rendering Librarypoppler-qt0.43.0-16.25.1lock src
PDF Rendering Librarypoppler-tools0.43.0-16.25.1lock src
PDF Rendering Library Tools0.43.0-16.25.1lock rpm
SUSE Linux Enterprise Server 12.5 x86_64
-
Packageslibpoppler-glib8
PDF Rendering Library - GLib Wrapperlibpoppler-qt4-40.43.0-16.25.1lock rpm
PDF Rendering Library - Qt4 Wrapperlibpoppler600.43.0-16.25.1lock rpm
PDF Rendering Librarypoppler0.43.0-16.25.1lock rpm
PDF Rendering Librarypoppler-qt0.43.0-16.25.1lock src
PDF Rendering Librarypoppler-tools0.43.0-16.25.1lock src
PDF Rendering Library Tools0.43.0-16.25.1lock rpm
SUSE Linux Enterprise Server 12.5 s390x
-
Packageslibpoppler-glib8
PDF Rendering Library - GLib Wrapperlibpoppler-qt4-40.43.0-16.25.1lock rpm
PDF Rendering Library - Qt4 Wrapperlibpoppler600.43.0-16.25.1lock rpm
PDF Rendering Librarypoppler0.43.0-16.25.1lock rpm
PDF Rendering Librarypoppler-qt0.43.0-16.25.1lock src
PDF Rendering Librarypoppler-tools0.43.0-16.25.1lock src
PDF Rendering Library Tools0.43.0-16.25.1lock rpm