Skip to content
OpenAdvisories
Medium ELSA-2019-2022 12 CVEs

Moderate: poppler security, bug fix, and enhancement update (Oracle Linux 7)

Published Aug 13, 2019 · Updated Aug 13, 2019

Summary

evince
[3.28.2-8]
- Do not free EvDocumentInfo in ev_window_save_print_settings(),
- it is freed in EvDocuments destructor
- Resolves: #1541358

[3.28.2-7]
- Do not store page-scaling for documents with enforced
- page-scaling
- Resolves: #1541358

[3.28.2-6]
- Use PrintScaling preference stored in PDFs
- Resolves: #1541358

okular
[4.10.5-7]
- Fix patch adding information about substituting font
Resolves: bz#1458037

[4.10.5-6]
- Fix broken dependency on kde-runtime
Resolves: bz#1670723

[4.10.5-5]
- Add information about substituting font
Resolves: bz#1458037

poppler
[0.26.5-38]
- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417

[0.26.5-37]
- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961

[0.26.5-36]
- Fix version from which PrintScaling is available
- Resolves: #1658304

[0.26.5-35]
- Export PrintScaling viewer preference in glib frontend
- Related: #1658304

[0.26.5-34]
- Fix a memory leak detected by Coverity Scan
- Related: #1636103

[0.26.5-33]
- Only embed mime data for gray/rgb/cmyk colorspaces
- if image decode map is identity
- Resolves: #1636103

[0.26.5-32]
- Fix possible crash on broken files in ImageStream::getLine()
- Resolves: #1685267

[0.26.5-31]
- Avoid global display profile state becoming an uncontrolled
- memory leak
- Resolves: #1648860

[0.26.5-30]
- Check for missing pages in documents passed to pdfunite
- Resolves: #1677348

[0.26.5-29]
- Dont reuse 'entry' in Parser::makeStream
- Resolves: #1677058

[0.26.5-28]
- Move the fileSpec.dictLookup call inside fileSpec.isDict if
- Resolves: #1677029

[0.26.5-27]
- Defend against requests for negative XRef indices
- Resolves: #1673700

[0.26.5-26]
- Add font substituteName() getter to Qt bindings
- Resolves: bz#1639595

[0.26.5-25]
- Check for valid file name of embedded file
- Resolves: #1651307

[0.26.5-24]
- Check for valid embedded file before trying to save it
- Resolves: #1651306

[0.26.5-23]
- Check for stream before calling stream methods
- when saving an embedded file
- Resolves: #1651305

[0.26.5-22]
- Fix crash on missing embedded file
- Resolves: #1651309

[0.26.5-21]
- Avoid cycles in PDF parsing
- Resolves: #1640295

Fixed packages 20

ReleasePackageFixed in
Oracle Linux · 7 evince 0:3.28.2-8.el7
Oracle Linux · 7 evince-browser-plugin 0:3.28.2-8.el7
Oracle Linux · 7 evince-devel 0:3.28.2-8.el7
Oracle Linux · 7 evince-dvi 0:3.28.2-8.el7
Oracle Linux · 7 evince-libs 0:3.28.2-8.el7
Oracle Linux · 7 evince-nautilus 0:3.28.2-8.el7
Oracle Linux · 7 okular 0:4.10.5-7.el7
Oracle Linux · 7 okular-devel 0:4.10.5-7.el7
Oracle Linux · 7 okular-libs 0:4.10.5-7.el7
Oracle Linux · 7 okular-part 0:4.10.5-7.el7
Oracle Linux · 7 poppler 0:0.26.5-38.el7
Oracle Linux · 7 poppler-cpp 0:0.26.5-38.el7
Oracle Linux · 7 poppler-cpp-devel 0:0.26.5-38.el7
Oracle Linux · 7 poppler-demos 0:0.26.5-38.el7
Oracle Linux · 7 poppler-devel 0:0.26.5-38.el7
Oracle Linux · 7 poppler-glib 0:0.26.5-38.el7
Oracle Linux · 7 poppler-glib-devel 0:0.26.5-38.el7
Oracle Linux · 7 poppler-qt 0:0.26.5-38.el7
Oracle Linux · 7 poppler-qt-devel 0:0.26.5-38.el7
Oracle Linux · 7 poppler-utils 0:0.26.5-38.el7

Vulnerabilities 12