Medium ELSA-2017-2551 2 CVEs

Moderate: poppler security update (Oracle Linux 7)

Published Aug 30, 2017 · Updated Aug 30, 2017

Ecosystem: Oracle Linux

Summary

[0.26.5-17]
- Resolves: rhbz#1482934 CVE-2017-9776

Fixed packages 10

Release	Package	Fixed in
Oracle Linux · 7	poppler	0:0.26.5-17.el7_4
Oracle Linux · 7	poppler-cpp	0:0.26.5-17.el7_4
Oracle Linux · 7	poppler-cpp-devel	0:0.26.5-17.el7_4
Oracle Linux · 7	poppler-demos	0:0.26.5-17.el7_4
Oracle Linux · 7	poppler-devel	0:0.26.5-17.el7_4
Oracle Linux · 7	poppler-glib	0:0.26.5-17.el7_4
Oracle Linux · 7	poppler-glib-devel	0:0.26.5-17.el7_4
Oracle Linux · 7	poppler-qt	0:0.26.5-17.el7_4
Oracle Linux · 7	poppler-qt-devel	0:0.26.5-17.el7_4
Oracle Linux · 7	poppler-utils	0:0.26.5-17.el7_4

Vulnerabilities 2

Unscored —

CVE-2017-9775

Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of …

poppler poppler Debian Ubuntu

Jun 22, 2017
Unscored —

CVE-2017-9776

Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote a…

poppler poppler Debian Ubuntu

Jun 22, 2017