FEDORA-2017-6127ddb036 — security update for mingw-poppler

stable

mingw-poppler-0.45.0-5.fc25

FEDORA-2017-6127ddb036 created by smani 5 years ago for Fedora 25

This update fixes the following security vulnerabilities: - CVE-2017-14517 - CVE-2017-14518 - CVE-2017-14519 - CVE-2017-14617 - CVE-2017-14926 - CVE-2017-14927 - CVE-2017-14928 - CVE-2017-14929 - CVE-2017-14975 and CVE-2017-14976 - CVE-2017-14977

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-6127ddb036

This update has been submitted for testing by smani.

5 years ago

This update has been pushed to testing.

5 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

5 years ago

This update has been submitted for batched by smani.

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

mingw-poppler-0.45.0-5.fc25

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

BZ#1499162 CVE-2017-14517 poppler: NULL pointer dereference in the XRef::parseEntry() function

BZ#1499163 CVE-2017-14518 poppler: Floating point exception in the isImageInterpolationRequired() function

BZ#1499165 CVE-2017-14519 poppler: Memory corruption via Gfx.cc infinite loop

BZ#1499167 CVE-2017-14929 poppler: Memory corruption via Gfx.cc infinite loop

BZ#1499169 CVE-2017-14517 CVE-2017-14518 CVE-2017-14519 CVE-2017-14929 CVE-2017-14975 CVE-2017-14976 CVE-2017-14977 mingw-poppler: various flaws [fedora-all]

BZ#1499905 CVE-2017-14617 poppler: Floating point exception in the ImageStream class

BZ#1499907 CVE-2017-14617 CVE-2017-14926 CVE-2017-14927 CVE-2017-14928 mingw-poppler: various flaws [fedora-all]

BZ#1500343 CVE-2017-14975 poppler: NULL pointer dereference in the FoFiType1C::convertToType0 function

BZ#1500344 CVE-2017-14977 poppler: NULL pointer dereference in the FoFiTrueType::getCFFBlock function

BZ#1500345 CVE-2017-14976 poppler: Heap-based buffer over-read in the FoFiType1C::convertToType0 function

mingw-poppler-0.45.0-5.fc25

Automated Test Results

None