FEDORA-2017-805d9423f8 — security update for poppler

stable

poppler-0.45.0-9.fc25

FEDORA-2017-805d9423f8 created by dtardon 6 years ago for Fedora 25

Security fix for CVE-2017-14926, CVE-2017-14927 and CVE-2017-14928.

Security fix for CVE-2017-14617

Security fix for CVE-2017-14517, CVE-2017-14518, CVE-2017-14519 and CVE-2017-14929.

CVE-2017-14520 Floating point exception in Splash::scaleImageYuXd

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-805d9423f8

This update has been submitted for testing by dtardon.

6 years ago

This update has obsoleted poppler-0.45.0-8.fc25, and has inherited its bugs and notes.

6 years ago

This update has been pushed to testing.

6 years ago

cserpentis commented & provided feedback 6 years ago

karma

works for me in a VM

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

filiperosset commented & provided feedback 6 years ago

karma

no regressions noted

pwalter commented & provided feedback 6 years ago

karma

Works

This update has been submitted for batched by bodhi.

6 years ago

This update has been submitted for stable by bodhi.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

poppler-0.45.0-9.fc25

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

BZ#1494583 CVE-2017-14520 poppler: Floating point exception in Splash::scaleImageYuXd() function in Splash.cc [fedora-all]

BZ#1499162 CVE-2017-14517 poppler: NULL pointer dereference in the XRef::parseEntry() function

BZ#1499163 CVE-2017-14518 poppler: Floating point exception in the isImageInterpolationRequired() function

BZ#1499165 CVE-2017-14519 poppler: Memory corruption via Gfx.cc infinite loop

BZ#1499167 CVE-2017-14929 poppler: Memory corruption via Gfx.cc infinite loop

BZ#1499168 CVE-2017-14517 CVE-2017-14518 CVE-2017-14519 CVE-2017-14929 CVE-2017-14975 CVE-2017-14976 CVE-2017-14977 poppler: various flaws [fedora-all]

BZ#1499905 CVE-2017-14617 poppler: Floating point exception in the ImageStream class

BZ#1499906 CVE-2017-14617 poppler: Floating point exception in the ImageStream class [fedora-all]

BZ#1500322 CVE-2017-14928 poppler: NULL pointer dereference in the AnnotRichMedia::Configuration::Configuration

BZ#1500323 CVE-2017-14926 poppler: NULL pointer dereference in the AnnotRichMedia::Content::Content

BZ#1500324 CVE-2017-14927 poppler: NULL pointer dereference in the SplashOutputDev::type3D0() function

BZ#1500326 CVE-2017-14926 CVE-2017-14927 CVE-2017-14928 poppler: various flaws [fedora-all]

poppler-0.45.0-9.fc25

Automated Test Results

None