FEDORA-2019-d04944813d — security update for poppler

stable

poppler-0.67.0-16.fc29

FEDORA-2019-d04944813d created by mkasik 5 years ago for Fedora 29

Security fix for CVE-2018-20662, CVE-2019-9631 and CVE-2019-9200. One additional fix for crash detected by ABRT.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-d04944813d

This update has been submitted for testing by mkasik.

5 years ago

This update has been pushed to testing.

5 years ago

besser82 commented & provided feedback 5 years ago

karma

Works great! LGTM! =)

szydell commented & provided feedback 5 years ago

karma

lgtm

bojan commented & provided feedback 5 years ago

karma

Works here.

This update has been submitted for batched by bodhi.

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

poppler-0.67.0-16.fc29

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

BZ#1665273 CVE-2018-20662 poppler: SIGABRT PDFDoc::setup class in PDFDoc.cc

BZ#1665274 CVE-2018-20662 poppler: SIGABRT PDFDoc::setup class in PDFDoc.cc [fedora-all]

BZ#1683632 CVE-2019-9200 poppler: heap-based buffer overflow in function ImageStream::getLine() in Stream.cc

BZ#1683633 CVE-2019-9200 poppler: heap-based buffer overflow in function ImageStream::getLine() in Stream.cc [fedora-all]

BZ#1686802 CVE-2019-9631 poppler: heap-based buffer over-read in function downsample_row_box_filter in CairoRescaleBox.cc

BZ#1686803 CVE-2019-9631 poppler: heap-based buffer over-read in function downsample_row_box_filter in CairoRescaleBox.cc [fedora-all]

BZ#1694457 [abrt] evince: Object::isString() const(): evince killed by SIGABRT

poppler-0.67.0-16.fc29

Automated Test Results

ignored