RHSA-2019:2713 — Red Hat Security Advisory: poppler security update

Fixed packages 21

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream	poppler	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::appstream	poppler-cpp-debuginfo	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::appstream	poppler-debuginfo	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::appstream	poppler-debugsource	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::appstream	poppler-glib	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::appstream	poppler-glib-debuginfo	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::appstream	poppler-qt5-debuginfo	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::appstream	poppler-utils	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::appstream	poppler-utils-debuginfo	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::crb	poppler-cpp	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::crb	poppler-cpp-debuginfo	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::crb	poppler-cpp-devel	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::crb	poppler-debuginfo	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::crb	poppler-debugsource	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::crb	poppler-devel	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::crb	poppler-glib-debuginfo	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::crb	poppler-glib-devel	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::crb	poppler-qt5	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::crb	poppler-qt5-debuginfo	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::crb	poppler-qt5-devel	0:0.66.0-11.el8_0.12
Red Hat · RHEL 8 enterprise_linux:8::crb	poppler-utils-debuginfo	0:0.66.0-11.el8_0.12

Vulnerabilities 12

Unscored —

CVE-2018-18897

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, a…

poppler poppler Debian Ubuntu

Nov 2, 2018
Unscored —

CVE-2018-20481

XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause…

poppler poppler Debian Ubuntu

Dec 26, 2018
Unscored —

CVE-2018-20551

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construc…

poppler poppler Debian Ubuntu

Dec 28, 2018
Unscored —

CVE-2018-20650

A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lac…

poppler poppler Debian Ubuntu

Jan 1, 2019
Unscored —

CVE-2018-20662

In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused b…

poppler poppler Debian Ubuntu

Jan 3, 2019
Unscored —

CVE-2019-10871

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPag…

poppler poppler Debian Ubuntu

Apr 5, 2019
Unscored —

CVE-2019-12293

In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with…

poppler poppler Debian Ubuntu

May 23, 2019
Unscored —

CVE-2019-7310

In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in …

poppler poppler Debian Ubuntu

Feb 3, 2019
Unscored —

CVE-2019-9200

A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for ex…

poppler poppler Debian Ubuntu

Feb 26, 2019
Unscored —

CVE-2019-9631

Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.

poppler poppler Debian Ubuntu

Mar 8, 2019
Unscored —

CVE-2019-9903

PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function…

poppler poppler Debian Ubuntu

Mar 21, 2019
Unscored —

CVE-2019-9959

The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading …

poppler poppler emscripten poppler Debian Ubuntu Alpine

Jul 22, 2019

References

article
https://access.redhat.com/security/updates/classification/#moderate
report
https://bugzilla.redhat.com/show_bug.cgi?id=1646546
report
https://bugzilla.redhat.com/show_bug.cgi?id=1665259
report
https://bugzilla.redhat.com/show_bug.cgi?id=1665263
report
https://bugzilla.redhat.com/show_bug.cgi?id=1665266
report
https://bugzilla.redhat.com/show_bug.cgi?id=1665273
report
https://bugzilla.redhat.com/show_bug.cgi?id=1672419
report
https://bugzilla.redhat.com/show_bug.cgi?id=1683632
report
https://bugzilla.redhat.com/show_bug.cgi?id=1686802
report
https://bugzilla.redhat.com/show_bug.cgi?id=1691724
report
https://bugzilla.redhat.com/show_bug.cgi?id=1696636
report
https://bugzilla.redhat.com/show_bug.cgi?id=1713582
report
https://bugzilla.redhat.com/show_bug.cgi?id=1732340
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2713.json
report
https://access.redhat.com/security/cve/CVE-2018-18897
advisory
https://www.cve.org/CVERecord?id=CVE-2018-18897
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-18897
report
https://access.redhat.com/security/cve/CVE-2018-20481
advisory
https://www.cve.org/CVERecord?id=CVE-2018-20481
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-20481
report
https://access.redhat.com/security/cve/CVE-2018-20551
advisory
https://www.cve.org/CVERecord?id=CVE-2018-20551
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-20551
report
https://access.redhat.com/security/cve/CVE-2018-20650
advisory
https://www.cve.org/CVERecord?id=CVE-2018-20650
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-20650
report
https://access.redhat.com/security/cve/CVE-2018-20662
advisory
https://www.cve.org/CVERecord?id=CVE-2018-20662
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-20662
report
https://access.redhat.com/security/cve/CVE-2019-7310
advisory
https://www.cve.org/CVERecord?id=CVE-2019-7310
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-7310
report
https://access.redhat.com/security/cve/CVE-2019-9200
advisory
https://www.cve.org/CVERecord?id=CVE-2019-9200
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-9200
report
https://access.redhat.com/security/cve/CVE-2019-9631
advisory
https://www.cve.org/CVERecord?id=CVE-2019-9631
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-9631
report
https://access.redhat.com/security/cve/CVE-2019-9903

Red Hat Security Advisory: poppler security update

Fixed packages 21

Vulnerabilities 12

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, a…

XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause…

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construc…

A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lac…

In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused b…

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPag…

In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with…

In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in …

A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for ex…

Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.

PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function…

The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading …

References