poppler-0.62.0-14.fc28
FEDORA-2019-40f4af0687 created by mkasik a year ago for Fedora 28
stable

Security fix for CVE-2018-20551, CVE-2018-20481 and CVE-2018-20650.

How to install

sudo dnf upgrade --advisory=FEDORA-2019-40f4af0687

This update has been submitted for testing by mkasik.

a year ago

mkasik edited this update.

New build(s):

  • poppler-0.62.0-14.fc28

Removed build(s):

  • poppler-0.62.0-13.fc28

Karma has been reset.

a year ago

This update has been pushed to testing.

a year ago
User Icon hreindl commented & provided feedback a year ago
karma

works for me

User Icon samoht0 commented & provided feedback a year ago
karma

no regressions noted

User Icon pwalter commented & provided feedback a year ago
karma

Works

This update has been submitted for batched by bodhi.

a year ago

This update has been submitted for stable by bodhi.

a year ago

This update has been pushed to stable.

a year ago

Please login to add feedback.

Metadata
Type
security
Severity
low
Karma
3
Signed
Content Type
RPM
Test Gating
Builds
1
poppler-0.62.0-14.fc28
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
disabled
Dates
submitted
a year ago
in testing
a year ago
in stable
a year ago
modified
a year ago
BZ#1646546 CVE-2018-18897 poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc
0
0
BZ#1646549 CVE-2018-18897 poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc [fedora-all]
0
0
BZ#1665259 Invalid bug number
0
0
BZ#1665260 CVE-2018-20551 poppler: reachable Object::getString assertion in AnnotRichMedia class in Annot.c [fedora-all]
0
0
BZ#1665263 CVE-2018-20650 poppler: reachable Object::dictLookup assertion in FileSpec class in FileSpec.cc
0
0
BZ#1665264 CVE-2018-20650 poppler: reachable Object::dictLookup assertion in FileSpec class in FileSpec.cc [fedora-all]
0
0
BZ#1665266 CVE-2018-20481 poppler: NULL pointer dereference in the XRef::getEntry in XRef.cc
0
0
BZ#1665268 CVE-2018-20481 poppler: NULL pointer dereference in the XRef::getEntry in XRef.cc [fedora-all]
0
0

Automated Test Results

Copyright © 2007-2019 Red Hat, Inc. and others.

Running bodhi-5.4.0 on bodhi-web-20-z98f6.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •