Summary
evince
[3.28.2-8]
- Do not free EvDocumentInfo in ev_window_save_print_settings(),
- it is freed in EvDocuments destructor
- Resolves: #1541358
[3.28.2-7]
- Do not store page-scaling for documents with enforced
- page-scaling
- Resolves: #1541358
[3.28.2-6]
- Use PrintScaling preference stored in PDFs
- Resolves: #1541358
okular
[4.10.5-7]
- Fix patch adding information about substituting font
Resolves: bz#1458037
[4.10.5-6]
- Fix broken dependency on kde-runtime
Resolves: bz#1670723
[4.10.5-5]
- Add information about substituting font
Resolves: bz#1458037
poppler
[0.26.5-38]
- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417
[0.26.5-37]
- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961
[0.26.5-36]
- Fix version from which PrintScaling is available
- Resolves: #1658304
[0.26.5-35]
- Export PrintScaling viewer preference in glib frontend
- Related: #1658304
[0.26.5-34]
- Fix a memory leak detected by Coverity Scan
- Related: #1636103
[0.26.5-33]
- Only embed mime data for gray/rgb/cmyk colorspaces
- if image decode map is identity
- Resolves: #1636103
[0.26.5-32]
- Fix possible crash on broken files in ImageStream::getLine()
- Resolves: #1685267
[0.26.5-31]
- Avoid global display profile state becoming an uncontrolled
- memory leak
- Resolves: #1648860
[0.26.5-30]
- Check for missing pages in documents passed to pdfunite
- Resolves: #1677348
[0.26.5-29]
- Dont reuse 'entry' in Parser::makeStream
- Resolves: #1677058
[0.26.5-28]
- Move the fileSpec.dictLookup call inside fileSpec.isDict if
- Resolves: #1677029
[0.26.5-27]
- Defend against requests for negative XRef indices
- Resolves: #1673700
[0.26.5-26]
- Add font substituteName() getter to Qt bindings
- Resolves: bz#1639595
[0.26.5-25]
- Check for valid file name of embedded file
- Resolves: #1651307
[0.26.5-24]
- Check for valid embedded file before trying to save it
- Resolves: #1651306
[0.26.5-23]
- Check for stream before calling stream methods
- when saving an embedded file
- Resolves: #1651305
[0.26.5-22]
- Fix crash on missing embedded file
- Resolves: #1651309
[0.26.5-21]
- Avoid cycles in PDF parsing
- Resolves: #1640295
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | evince | 0:3.28.2-8.el7 |
| Oracle Linux · 7 | evince-browser-plugin | 0:3.28.2-8.el7 |
| Oracle Linux · 7 | evince-devel | 0:3.28.2-8.el7 |
| Oracle Linux · 7 | evince-dvi | 0:3.28.2-8.el7 |
| Oracle Linux · 7 | evince-libs | 0:3.28.2-8.el7 |
| Oracle Linux · 7 | evince-nautilus | 0:3.28.2-8.el7 |
| Oracle Linux · 7 | okular | 0:4.10.5-7.el7 |
| Oracle Linux · 7 | okular-devel | 0:4.10.5-7.el7 |
| Oracle Linux · 7 | okular-libs | 0:4.10.5-7.el7 |
| Oracle Linux · 7 | okular-part | 0:4.10.5-7.el7 |
| Oracle Linux · 7 | poppler | 0:0.26.5-38.el7 |
| Oracle Linux · 7 | poppler-cpp | 0:0.26.5-38.el7 |
| Oracle Linux · 7 | poppler-cpp-devel | 0:0.26.5-38.el7 |
| Oracle Linux · 7 | poppler-demos | 0:0.26.5-38.el7 |
| Oracle Linux · 7 | poppler-devel | 0:0.26.5-38.el7 |
| Oracle Linux · 7 | poppler-glib | 0:0.26.5-38.el7 |
| Oracle Linux · 7 | poppler-glib-devel | 0:0.26.5-38.el7 |
| Oracle Linux · 7 | poppler-qt | 0:0.26.5-38.el7 |
| Oracle Linux · 7 | poppler-qt-devel | 0:0.26.5-38.el7 |
| Oracle Linux · 7 | poppler-utils | 0:0.26.5-38.el7 |
Vulnerabilities 12
-
Unscored —
In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote…
-
Unscored —
An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, a…
-
Unscored —
An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service becau…
-
Unscored —
An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to…
-
Unscored —
An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial …
-
Unscored —
Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_att…
-
Unscored —
XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause…
-
Unscored —
A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lac…
-
Unscored —
In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused b…
-
Unscored —
In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in …
-
Unscored —
A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for ex…
-
Unscored —
Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.