FEDORA-2019-7ff7f5093e — security update for poppler

stable

poppler-0.67.0-10.fc29

FEDORA-2019-7ff7f5093e created by mkasik 5 years ago for Fedora 29

Security fix for CVE-2018-20551, CVE-2018-20481, CVE-2018-20650 and CVE-2018-18897.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-7ff7f5093e

This update has been submitted for testing by mkasik.

5 years ago

mkasik edited this update.

New build(s):

poppler-0.67.0-10.fc29

Removed build(s):

poppler-0.67.0-9.fc29

Karma has been reset.

5 years ago

This update has been pushed to testing.

5 years ago

besser82 commented & provided feedback 5 years ago

karma

Works great! LGTM! =)

cserpentis commented & provided feedback 5 years ago

karma

works for me

pwalter commented & provided feedback 5 years ago

karma

Works

This update has been submitted for batched by bodhi.

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

modified

5 years ago

Builds

poppler-0.67.0-10.fc29

BZ#1646546 CVE-2018-18897 poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc

BZ#1646549 CVE-2018-18897 poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc [fedora-all]

BZ#1665259 Invalid bug number

BZ#1665260 CVE-2018-20551 poppler: reachable Object::getString assertion in AnnotRichMedia class in Annot.c [fedora-all]

BZ#1665263 CVE-2018-20650 poppler: reachable Object::dictLookup assertion in FileSpec class in FileSpec.cc

BZ#1665264 CVE-2018-20650 poppler: reachable Object::dictLookup assertion in FileSpec class in FileSpec.cc [fedora-all]

BZ#1665266 CVE-2018-20481 poppler: NULL pointer dereference in the XRef::getEntry in XRef.cc

BZ#1665268 CVE-2018-20481 poppler: NULL pointer dereference in the XRef::getEntry in XRef.cc [fedora-all]

poppler-0.67.0-10.fc29

Automated Test Results

ignored