FEDORA-2018-12b934e224 — security update for mingw-poppler

stable

mingw-poppler-0.62.0-2.fc28

FEDORA-2018-12b934e224 created by smani 6 years ago for Fedora 28

This update fixes CVE-2017-18267, CVE-2018-13988, CVE-2018-16646, CVE-2018-19058, CVE-2018-19059, CVE-2018-19060, CVE-2018-19149

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-12b934e224

This update has been submitted for testing by smani.

6 years ago

This update has been pushed to testing.

6 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

This update has been submitted for batched by smani.

6 years ago

This update has been submitted for stable by bodhi.

6 years ago

This update has been pushed to stable.

6 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

Builds

mingw-poppler-0.62.0-2.fc28

BZ#1578777 CVE-2017-18267 poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service

BZ#1578781 CVE-2017-18267 mingw-poppler: poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service [fedora-all]

BZ#1602838 CVE-2018-13988 poppler: out of bounds read in pdfunite

BZ#1607462 CVE-2018-13988 mingw-poppler: poppler: buffer overflow in pdfunite [fedora-all]

BZ#1626618 CVE-2018-16646 poppler: infinite recursion in Parser::getObj function in Parser.cc

BZ#1626621 CVE-2018-16646 mingw-poppler: poppler: infinite recursion in Parser::getObj function in Parser.cc [fedora-all]

BZ#1646546 CVE-2018-18897 poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc

BZ#1646550 CVE-2018-18897 mingw-poppler: poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc [fedora-all]

BZ#1649435 CVE-2018-19058 poppler: reachable abort in Object.h

BZ#1649437 CVE-2018-19058 mingw-poppler: poppler: reachable abort in Object.h [fedora-all]

BZ#1649440 CVE-2018-19059 poppler: out-of-bounds read in EmbFile::save2 in FileSpec.cc

BZ#1649442 CVE-2018-19059 mingw-poppler: poppler: out-of-bounds read in EmbFile::save2 in FileSpec.cc [fedora-all]

BZ#1649450 CVE-2018-19060 poppler: pdfdetach utility does not validate save paths

BZ#1649452 CVE-2018-19060 mingw-poppler: poppler: pdfdetach utility does not validate save paths [fedora-all]

BZ#1649457 CVE-2018-19149 poppler: NULL pointer dereference in _poppler_attachment_new

BZ#1649459 CVE-2018-19149 mingw-poppler: poppler: NULL pointer dereference in _poppler_attachment_new [fedora-all]

mingw-poppler-0.62.0-2.fc28

Automated Test Results

ignored