Skip to content
OpenAdvisories
Medium RLSA-2021:1881 1 CVE

Moderate: poppler and evince security, bug fix, and enhancement update

Published May 18, 2021 · Updated Feb 5, 2026

Summary

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files.

The following packages have been upgraded to a later upstream version: poppler (20.11.0). (BZ#1644423)

Security Fix(es):

* poppler: pdftohtml: access to uninitialized pointer could lead to DoS (CVE-2020-27778)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.

Fixed packages 2

ReleasePackageFixed in
Rocky Linux · 8 evince 0:3.28.4-11.el8
Rocky Linux · 8 poppler 0:20.11.0-2.el8

Vulnerabilities 1

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1889793
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1900712
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1919423