FEDORA-2019-13ba3be562 — security update for poppler

stable

poppler-0.62.0-20.fc28

FEDORA-2019-13ba3be562 created by mkasik 5 years ago for Fedora 28

Security fix for CVE-2018-20662, CVE-2019-9631 and CVE-2019-9200. One additional fix for crash detected by ABRT.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-13ba3be562

This update has been submitted for testing by mkasik.

5 years ago

This update has been pushed to testing.

5 years ago

craigrobson provided feedback 5 years ago

karma

BZ#1694457 [abrt] evince: Object::isString() const(): evince killed by SIGABRT

samoht0 commented & provided feedback 5 years ago

karma

no regressions noted

pwalter commented & provided feedback 5 years ago

karma

Works

This update has been submitted for batched by bodhi.

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

poppler-0.62.0-20.fc28

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

BZ#1665273 CVE-2018-20662 poppler: SIGABRT PDFDoc::setup class in PDFDoc.cc

BZ#1665274 CVE-2018-20662 poppler: SIGABRT PDFDoc::setup class in PDFDoc.cc [fedora-all]

BZ#1683632 CVE-2019-9200 poppler: heap-based buffer overflow in function ImageStream::getLine() in Stream.cc

BZ#1683633 CVE-2019-9200 poppler: heap-based buffer overflow in function ImageStream::getLine() in Stream.cc [fedora-all]

BZ#1686802 CVE-2019-9631 poppler: heap-based buffer over-read in function downsample_row_box_filter in CairoRescaleBox.cc

BZ#1686803 CVE-2019-9631 poppler: heap-based buffer over-read in function downsample_row_box_filter in CairoRescaleBox.cc [fedora-all]

BZ#1694457 [abrt] evince: Object::isString() const(): evince killed by SIGABRT

poppler-0.62.0-20.fc28

Automated Test Results

ignored