ELSA-2007-1026

ELSA-2007-1026 - Important: poppler security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2007-11-23

Description

[2.3.27-8.1]
Fixes for:
- 345101 - CVE-2007-4352 xpdf memory corruption in DCTStream::readProgressiveDataUnit()
- 345111 - CVE-2007-5392 xpdf buffer overflow in DCTStream::reset()
- 345121 - CVE-2007-5393 xpdf buffer overflow in CCITTFaxStream::lookChar()

Related CVEs

CVE-2007-4352

CVE-2007-5393

CVE-2007-5392

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	poppler-0.5.4-4.3.el5_1.src.rpm	4032a884a8acfe29100eb70c15e809941978d3fa7cad954027c19999a56b2287	ELBA-2013-1128	el5_u1_i386_patch
	poppler-0.5.4-4.3.el5_1.i386.rpm	2ed2903a346953c9434c295b1c211765a5aabee434f5b86d4f1b0aaf2365fa3c	ELBA-2013-1128	el5_u1_i386_patch
	poppler-devel-0.5.4-4.3.el5_1.i386.rpm	c0fcd94fbf907f07e48326eeaaf534437233b90ed458d0d40e14ff7c0d21c034	ELBA-2013-1128	el5_u1_i386_patch
	poppler-utils-0.5.4-4.3.el5_1.i386.rpm	3b28b79d04ffa4d9563708d61cad6e92c4f98b78b1f0978ed9ed51dd807648de	ELBA-2013-1128	el5_u1_i386_patch
Oracle Linux 5 (x86_64)	poppler-0.5.4-4.3.el5_1.src.rpm	4032a884a8acfe29100eb70c15e809941978d3fa7cad954027c19999a56b2287	ELBA-2013-1128	el5_u1_x86_64_patch
	poppler-0.5.4-4.3.el5_1.i386.rpm	2ed2903a346953c9434c295b1c211765a5aabee434f5b86d4f1b0aaf2365fa3c	ELBA-2013-1128	el5_u1_x86_64_patch
	poppler-0.5.4-4.3.el5_1.x86_64.rpm	f1ece9013d2dad3a41562c2d093ef3ce588a57cbf582acaed324a9a4304f0979	ELBA-2013-1128	el5_u1_x86_64_patch
	poppler-devel-0.5.4-4.3.el5_1.i386.rpm	c0fcd94fbf907f07e48326eeaaf534437233b90ed458d0d40e14ff7c0d21c034	ELBA-2013-1128	el5_u1_x86_64_patch
	poppler-devel-0.5.4-4.3.el5_1.x86_64.rpm	52751525819fbb4a651c7d9000a6c67e2e619173b5c610747ca219a416387eb4	ELBA-2013-1128	el5_u1_x86_64_patch
	poppler-utils-0.5.4-4.3.el5_1.x86_64.rpm	12a2ed77f2bead377b1db259417662aefb1fa26149c8481c855beaf3b24f3746	ELBA-2013-1128	el5_u1_x86_64_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team