FEDORA-2017-025ff38ac9 — security update for poppler

stable

poppler-0.57.0-5.fc27

FEDORA-2017-025ff38ac9 created by dtardon 7 years ago for Fedora 27

Security fix for CVE-2017-14926, CVE-2017-14927 and CVE-2017-14928.

Security fix for CVE-2017-14617

Security fix for CVE-2017-14517, CVE-2017-14518, CVE-2017-14519 and CVE-2017-14929.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-025ff38ac9

This update has been submitted for testing by dtardon.

7 years ago

This update has obsoleted poppler-0.57.0-4.fc27, and has inherited its bugs and notes.

7 years ago

This update has been pushed to testing.

7 years ago

pwalter commented & provided feedback 7 years ago

karma

Works

piotrdrag commented & provided feedback 7 years ago

karma

Evince works.

This update has reached 3 days in testing and can be pushed to stable now if the maintainer wishes

7 years ago

kparal commented & provided feedback 7 years ago

karma

pdf rendering in evince seems to work fine

This update has been submitted for batched by bodhi.

7 years ago

This update has been submitted for stable by bodhi.

7 years ago

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

Builds

poppler-0.57.0-5.fc27

BZ#1499162 CVE-2017-14517 poppler: NULL pointer dereference in the XRef::parseEntry() function

BZ#1499163 CVE-2017-14518 poppler: Floating point exception in the isImageInterpolationRequired() function

BZ#1499165 CVE-2017-14519 poppler: Memory corruption via Gfx.cc infinite loop

BZ#1499167 CVE-2017-14929 poppler: Memory corruption via Gfx.cc infinite loop

BZ#1499168 CVE-2017-14517 CVE-2017-14518 CVE-2017-14519 CVE-2017-14929 CVE-2017-14975 CVE-2017-14976 CVE-2017-14977 poppler: various flaws [fedora-all]

BZ#1499905 CVE-2017-14617 poppler: Floating point exception in the ImageStream class

BZ#1499906 CVE-2017-14617 poppler: Floating point exception in the ImageStream class [fedora-all]

BZ#1500322 CVE-2017-14928 poppler: NULL pointer dereference in the AnnotRichMedia::Configuration::Configuration

BZ#1500323 CVE-2017-14926 poppler: NULL pointer dereference in the AnnotRichMedia::Content::Content

BZ#1500324 CVE-2017-14927 poppler: NULL pointer dereference in the SplashOutputDev::type3D0() function

BZ#1500326 CVE-2017-14926 CVE-2017-14927 CVE-2017-14928 poppler: various flaws [fedora-all]

poppler-0.57.0-5.fc27

Automated Test Results

None