FEDORA-2017-6d59576860 — security update for poppler

obsolete

poppler-0.57.0-3.fc27

FEDORA-2017-6d59576860 created by dtardon 6 years ago for Fedora 27

Security fix for CVE-2017-14517, CVE-2017-14518, CVE-2017-14519 and CVE-2017-14929.

This update has been submitted for testing by dtardon.

6 years ago

This update has been pushed to testing.

6 years ago

yselkowitz commented & provided feedback 6 years ago

Doesn't the fix for CVE-2017-14929 cause an ABI break?

piotrdrag commented & provided feedback 6 years ago

karma

Evince works fine.

This update has been obsoleted by poppler-0.57.0-4.fc27.

6 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

poppler-0.57.0-3.fc27

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

BZ#1499162 CVE-2017-14517 poppler: NULL pointer dereference in the XRef::parseEntry() function

BZ#1499163 CVE-2017-14518 poppler: Floating point exception in the isImageInterpolationRequired() function

BZ#1499165 CVE-2017-14519 poppler: Memory corruption via Gfx.cc infinite loop

BZ#1499167 CVE-2017-14929 poppler: Memory corruption via Gfx.cc infinite loop

BZ#1499168 CVE-2017-14517 CVE-2017-14518 CVE-2017-14519 CVE-2017-14929 CVE-2017-14975 CVE-2017-14976 CVE-2017-14977 poppler: various flaws [fedora-all]

poppler-0.57.0-3.fc27

Automated Test Results

None