Summary
[0.66.0-11.el8_0.12]
- Ignore dict Length if it is broken
- Resolves: #1741146
[0.66.0-11.el8_0.11]
- Check whether input is RGB in PSOutputDev::checkPageSlice()
- (also when using '-optimizecolorspace' flag)
- Resolves: #1741145
[0.66.0-11.el8_0.10]
- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1740612
[0.66.0-11.el8_0.9]
- Fix stack overflow on broken file
- Resolves: #1717867
[0.66.0-11.el8_0.8]
- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1717866
[0.66.0-11.el8_0.7]
- Fix possible crash on broken files in ImageStream::getLine()
- Resolves: #1717803
[0.66.0-11.el8_0.6]
- Move the fileSpec.dictLookup call inside fileSpec.isDict if
- Resolves: #1717788
[0.66.0-11.el8_0.5]
- Defend against requests for negative XRef indices
- Resolves: #1717779
[0.66.0-11.el8_0.4]
- Do not try to parse into unallocated XRef entry
- Resolves: #1717790
[0.66.0-11.el8_0.3]
- Avoid global display profile state becoming an uncontrolled
- memory leak
- Resolves: #1717776
[0.66.0-11.el8_0.2]
- Check Catalog from XRef for being a Dict
- Resolves: #1690480
[0.66.0-11.el8_0.1]
- Do not try to construct invalid rich media annotation assets
- Resolves: #1690478
[0.66.0-11]
- Fix tiling patterns when pattern cell is too far
- Resolves: #1644094
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | poppler | 0:0.66.0-11.el8_0.12 |
| Oracle Linux · 8 | poppler-cpp | 0:0.66.0-11.el8_0.12 |
| Oracle Linux · 8 | poppler-cpp-devel | 0:0.66.0-11.el8_0.12 |
| Oracle Linux · 8 | poppler-devel | 0:0.66.0-11.el8_0.12 |
| Oracle Linux · 8 | poppler-glib | 0:0.66.0-11.el8_0.12 |
| Oracle Linux · 8 | poppler-glib-devel | 0:0.66.0-11.el8_0.12 |
| Oracle Linux · 8 | poppler-qt5 | 0:0.66.0-11.el8_0.12 |
| Oracle Linux · 8 | poppler-qt5-devel | 0:0.66.0-11.el8_0.12 |
| Oracle Linux · 8 | poppler-utils | 0:0.66.0-11.el8_0.12 |
Vulnerabilities 12
-
Unscored —
An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, a…
-
Unscored —
XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause…
-
Unscored —
A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construc…
-
Unscored —
A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lac…
-
Unscored —
In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused b…
-
Unscored —
An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPag…
-
Unscored —
In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with…
-
Unscored —
In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in …
-
Unscored —
A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for ex…
-
Unscored —
Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.
-
Unscored —
PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function…
-
Unscored —
The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading …