Summary
USN-3837-1 fixed vulnerabilities in poppler. A regression was reported
regarding the previous update. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that poppler incorrectly handled certain PDF files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2018-16646)
It was discovered that poppler incorrectly handled certain PDF files.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 16.04 LTS.
(CVE-2018-19149)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | poppler | 0.24.5-2ubuntu4.14 |
| Ubuntu · 16.04 LTS 16.04:LTS | poppler | 0.41.0-0ubuntu1.10 |
| Ubuntu · 18.04 LTS 18.04:LTS | poppler | 0.62.0-2ubuntu2.5 |
Vulnerabilities 2
-
Unscored —
In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote…
-
Unscored —
Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_att…