Skip to content
OpenAdvisories
Medium ELSA-2024-2979 1 CVE

Moderate: poppler security update (Oracle Linux 8)

Published May 23, 2024 · Updated May 23, 2024

Summary

[21.01.0-11]
- Fix crashes in FoFiType1C
- Rebuild for inclusion of poppler-glib-doc in CRB
- Resolves: RHEL-4255, RHEL-4273

[21.01.0-10]
- Check XRef's Catalog for being a Dict
- Resolves: #2189816

[20.11.0-9]
- Check isDict before calling getDict 2
- Resolves: #2189837

[20.11.0-8]
- Check isDict before calling getDict
- Resolves: #2189823

[20.11.0-7]
- Don't crash in broken documents
- Resolves: #2189844

[20.11.0-6]
- Check for overflow when computing number of symbols
- in JBIG2 text region
- Resolves: #2126361

[20.11.0-5]
- Don't run out of file for Hints
- Rebuild for #2096452
- Resolves: #2090969, #2096452

[20.11.0-4]
- Fix opening files with streams with wrong generations
- Resolves: #2002575

[20.11.0-3]
- Fix crash when processing dates of embedded files
- Resolves: #1981108

[20.11.0-2]
- Improve python3 build dependency
- Resolves: #1896335

[20.11.0-1]
- Rebase poppler to 20.11.0
- Modify/remove patches as needed
- Resolves: #1644423

[0.66.0-27]
- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801341

[0.66.0-26]
- Coverity scan related fixes
- Related: #1618766

[0.66.0-25]
- Check whether input is RGB in PSOutputDev::checkPageSlice()
- also when using '-optimizecolorspace' flag
- Resolves: #1697576

[0.66.0-24]
- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697576

[0.66.0-23]
- Ignore dict Length if it is broken
- Resolves: #1733027

[0.66.0-22]
- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723505

[0.66.0-21]
- Implement crypto functions using NSS
- Resolves: #1618766

[0.66.0-20]
- Fix stack overflow on broken file
- Resolves: #1691887

[0.66.0-19]
- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688418

[0.66.0-18]
- Fix possible crash on broken files in ImageStream::getLine()
- Resolves: #1685268

[0.66.0-17]
- Check Catalog from XRef for being a Dict
- Resolves: #1677347

[0.66.0-16]
- Move the fileSpec.dictLookup call inside fileSpec.isDict if
- Resolves: #1677028

[0.66.0-15]
- Do not try to construct invalid rich media annotation assets
- Resolves: #1677025

[0.66.0-14]
- Defend against requests for negative XRef indices
- Resolves: #1673699

[0.66.0-13]
- Do not try to parse into unallocated XRef entry
- Resolves: #1677057

[0.66.0-12]
- Avoid global display profile state becoming an uncontrolled
- memory leak
- Resolves: #1646552

[0.66.0-11]
- Fix tiling patterns when pattern cell is too far
- Resolves: #1644094

[0.66.0-10]
- Check for valid file name of embedded file
- Resolves: #1649453

[0.66.0-9]
- Check for valid embedded file before trying to save it
- Resolves: #1649443

[0.66.0-8]
- Check for stream before calling stream methods
- when saving an embedded file
- Resolves: #1649438

[0.66.0-7]
- Fix crash on missing embedded file
- Resolves: #1649460

[0.66.0-6]
- Avoid cycles in PDF parsing
- Resolves: #1626623

[0.66.0-5]
- Fix crash when accessing list of selections
- Resolves: #1638712

[0.66.0-4]
- Fix important issues found by covscan
- Resolves: #1602662

[0.66.0-3]
- Fix BuildRequires for /usr/bin/python3
- Resolves: #1615561

[0.66.0-2]
- Fix crash when Object has negative number (CVE-2018-13988)
- Resolves: #1607463

[0.66.0-1]
- Rebase poppler to 0.66.0
- Resolves: #1600553

[0.62.0-4]
- Drop reversion of removal of Qt4 frontend

[0.62.0-3]
- Fix infinite recursion (CVE-2017-18267)
- Resolves: #1578779

[0.62.0-2]
- Fix building of poppler with python3 only
- Resolves: #1580849

[0.62.0-1]
- new upstream release

[0.61.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0.61.1-1]
- new upstream release

[0.61.0-1]
- new upstream release

[0.60.1-2]
- -qt5: drop hard-coded versioned dependency

[0.60.0-1]
- new upstream release

[0.59.0-2]
- Resolves: rhbz#1494583 CVE-2017-14520

[0.59.0-1]
- new upstream release

[0.57.0-1]
- new upstream release

[0.56.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[0.56.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0.56.0-2]
- Resolves: rhbz#1459067 CVE-2017-7515 CVE-2017-9775 CVE-2017-9776 CVE-2017-9865

[0.56.0-1]
- new upstream release

[0.55.0-2]
- Resolves: rhbz#1456828 CVE-2017-7511 Null pointer deference

[0.55.0-1]
- new upstream release

[0.53.0-1]
- new upstream release

[0.52.0-1]
- new upstream release

[0.51.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0.51.0-1]
- new upstream release

[0.50.0-1]
- new upstream release

[0.49.0-1]
- new upstream release

[0.48.0-1]
- Update to 0.48.0
- Resolves: #1359555

[0.45.0-2]
- Don't crash when calling cmsGetColorSpace()
- Resolves: #1363669

[0.45.0-1]
- Update to 0.45.0
- Resolves: #1338421

[0.43.0-2]
- Restore the current position of char also in output device
- Related: #1352717

[0.43.0-1]
- Update to 0.43.0
- Resolves: #1318462

[0.41.0-1]
- Update to 0.41.0
- Resolves: #1309145

[0.40.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0.40.0-1]
- Update to 0.40.0
- Resolves: #1251781

[0.34.0-1]
- Update to 0.34.0
- Resolves: #1241305

[0.33.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0.33.0-1]
- Update to 0.33.0
- Resolves: #1190427

[0.30.0-5]
- Rebuilt for GCC 5 C++11 ABI change

[0.30.0-4]
- Respect orientation when selecting words
- Resolves: #1185007

[0.30.0-3]
- Rebuilt for Fedora 23 Change
https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code

[0.30.0-2]
- Use libopenjpeg2 instead of libopenjpeg

[0.30.0-1]
- Update to 0.30.0
- Resolves: #1171056

[0.28.1-3]
- Revert previous commit (It needs poppler-0.30.0)

[0.28.1-2]
- Use libopenjpeg2 instead of libopenjpeg

[0.28.1-1]
- Update to 0.28.1
- Resolves: #1147443

[0.26.4-1]
- Update to 0.26.4

[0.26.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[0.26.3-1]
- Update to 0.26.3

[0.26.2-2]
- Rebuilt

Fixed packages 10

ReleasePackageFixed in
Oracle Linux · 8 poppler 0:20.11.0-11.el8
Oracle Linux · 8 poppler-cpp 0:20.11.0-11.el8
Oracle Linux · 8 poppler-cpp-devel 0:20.11.0-11.el8
Oracle Linux · 8 poppler-devel 0:20.11.0-11.el8
Oracle Linux · 8 poppler-glib 0:20.11.0-11.el8
Oracle Linux · 8 poppler-glib-devel 0:20.11.0-11.el8
Oracle Linux · 8 poppler-glib-doc 0:20.11.0-11.el8
Oracle Linux · 8 poppler-qt5 0:20.11.0-11.el8
Oracle Linux · 8 poppler-qt5-devel 0:20.11.0-11.el8
Oracle Linux · 8 poppler-utils 0:20.11.0-11.el8

Vulnerabilities 1