Skip to content
OpenAdvisories
Unscored USN-4646-2 0 CVEs

poppler regression

Published Nov 26, 2020 · Updated Apr 22, 2026

Summary

USN-4646-1 fixed vulnerabilities in poppler. The fix for CVE-2019-10871
introduced a regression causing certain applications linked against poppler
to fail. This update backs out the fix pending further investigation.

We apologize for the inconvenience.

Original advisory details:

It was discovered that Poppler incorrectly handled certain files. If a user
or automated system were tricked into opening a crafted PDF file, an
attacker could cause a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS poppler 0.41.0-0ubuntu1.16
Ubuntu · 18.04 LTS 18.04:LTS poppler 0.62.0-2ubuntu2.12

References

  • report
    https://launchpad.net/bugs/1905741