Summary
Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.
Security Fix(es):
* poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | poppler | 20.11.0-6.el8 |
| AlmaLinux · 8 | poppler-cpp | 20.11.0-6.el8 |
| AlmaLinux · 8 | poppler-cpp-devel | 20.11.0-6.el8 |
| AlmaLinux · 8 | poppler-devel | 20.11.0-6.el8 |
| AlmaLinux · 8 | poppler-glib | 20.11.0-6.el8 |
| AlmaLinux · 8 | poppler-glib-devel | 20.11.0-6.el8 |
| AlmaLinux · 8 | poppler-qt5 | 20.11.0-6.el8 |
| AlmaLinux · 8 | poppler-qt5-devel | 20.11.0-6.el8 |
| AlmaLinux · 8 | poppler-utils | 20.11.0-6.el8 |
Vulnerabilities 1
-
Unscored —
Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSe…