Summary
evince
[3.28.2-9]
- Handle failure from TIFFReadRGBAImageOriented
- Resolves: #1717352
poppler
[0.26.5-42]
- Fix potential integer overflow and check length for negative values
- Resolves: #1757283
[0.26.5-41]
- Ignore dict Length if it is broken
- Resolves: #1733026
[0.26.5-40]
- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504
[0.26.5-39]
- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575
Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | evince | 0:3.28.2-9.el7 |
| Oracle Linux · 7 | evince-browser-plugin | 0:3.28.2-9.el7 |
| Oracle Linux · 7 | evince-devel | 0:3.28.2-9.el7 |
| Oracle Linux · 7 | evince-dvi | 0:3.28.2-9.el7 |
| Oracle Linux · 7 | evince-libs | 0:3.28.2-9.el7 |
| Oracle Linux · 7 | evince-nautilus | 0:3.28.2-9.el7 |
| Oracle Linux · 7 | poppler | 0:0.26.5-42.el7 |
| Oracle Linux · 7 | poppler-cpp | 0:0.26.5-42.el7 |
| Oracle Linux · 7 | poppler-cpp-devel | 0:0.26.5-42.el7 |
| Oracle Linux · 7 | poppler-demos | 0:0.26.5-42.el7 |
| Oracle Linux · 7 | poppler-devel | 0:0.26.5-42.el7 |
| Oracle Linux · 7 | poppler-glib | 0:0.26.5-42.el7 |
| Oracle Linux · 7 | poppler-glib-devel | 0:0.26.5-42.el7 |
| Oracle Linux · 7 | poppler-qt | 0:0.26.5-42.el7 |
| Oracle Linux · 7 | poppler-qt-devel | 0:0.26.5-42.el7 |
| Oracle Linux · 7 | poppler-utils | 0:0.26.5-42.el7 |
Vulnerabilities 5
-
Unscored —
Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.
-
Unscored —
An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPag…
-
Unscored —
The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince thr…
-
Unscored —
In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with…
-
Unscored —
The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading …