ELSA-2019-2022

ELSA-2019-2022 - poppler security, bug fix, and enhancement update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2019-08-13

Description

evince
[3.28.2-8]
- Do not free EvDocumentInfo in ev_window_save_print_settings(),
- it is freed in EvDocuments destructor
- Resolves: #1541358

[3.28.2-7]
- Do not store page-scaling for documents with enforced
- page-scaling
- Resolves: #1541358

[3.28.2-6]
- Use PrintScaling preference stored in PDFs
- Resolves: #1541358

okular
[4.10.5-7]
- Fix patch adding information about substituting font
Resolves: bz#1458037

[4.10.5-6]
- Fix broken dependency on kde-runtime
Resolves: bz#1670723

[4.10.5-5]
- Add information about substituting font
Resolves: bz#1458037

poppler
[0.26.5-38]
- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417

[0.26.5-37]
- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961

[0.26.5-36]
- Fix version from which PrintScaling is available
- Resolves: #1658304

[0.26.5-35]
- Export PrintScaling viewer preference in glib frontend
- Related: #1658304

[0.26.5-34]
- Fix a memory leak detected by Coverity Scan
- Related: #1636103

[0.26.5-33]
- Only embed mime data for gray/rgb/cmyk colorspaces
- if image decode map is identity
- Resolves: #1636103

[0.26.5-32]
- Fix possible crash on broken files in ImageStream::getLine()
- Resolves: #1685267

[0.26.5-31]
- Avoid global display profile state becoming an uncontrolled
- memory leak
- Resolves: #1648860

[0.26.5-30]
- Check for missing pages in documents passed to pdfunite
- Resolves: #1677348

[0.26.5-29]
- Dont reuse 'entry' in Parser::makeStream
- Resolves: #1677058

[0.26.5-28]
- Move the fileSpec.dictLookup call inside fileSpec.isDict if
- Resolves: #1677029

[0.26.5-27]
- Defend against requests for negative XRef indices
- Resolves: #1673700

[0.26.5-26]
- Add font substituteName() getter to Qt bindings
- Resolves: bz#1639595

[0.26.5-25]
- Check for valid file name of embedded file
- Resolves: #1651307

[0.26.5-24]
- Check for valid embedded file before trying to save it
- Resolves: #1651306

[0.26.5-23]
- Check for stream before calling stream methods
- when saving an embedded file
- Resolves: #1651305

[0.26.5-22]
- Fix crash on missing embedded file
- Resolves: #1651309

[0.26.5-21]
- Avoid cycles in PDF parsing
- Resolves: #1640295

Related CVEs

CVE-2018-16646

CVE-2018-18897

CVE-2018-20481

CVE-2018-20650

CVE-2018-20662

CVE-2019-7310

CVE-2019-9200

CVE-2019-9631

CVE-2018-19058

CVE-2018-19059

CVE-2018-19060

CVE-2018-19149

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	evince-3.28.2-8.el7.src.rpm	8c217b3f81b86d9ecaf5e3e344b12587	ELSA-2020-3977
	okular-4.10.5-7.el7.src.rpm	c8ce4ce7846b96d689cff185cc140ab5	ELSA-2020-4024
	poppler-0.26.5-38.el7.src.rpm	f5b1a2eb36d1e9f14ff47a2d69a18beb	ELBA-2020-5015
	evince-3.28.2-8.el7.aarch64.rpm	b70241f2594dad8b8fc32887082dd5f2	ELSA-2020-3977
	evince-browser-plugin-3.28.2-8.el7.aarch64.rpm	c4dae9e1b4d2bb58ab7756444b4adf6e	ELSA-2020-3977
	evince-devel-3.28.2-8.el7.aarch64.rpm	57ca97331888b1c48e4966255e5195a8	ELSA-2020-3977
	evince-dvi-3.28.2-8.el7.aarch64.rpm	606dae91496f3bf928a2a47a0e0207cf	ELSA-2020-3977
	evince-libs-3.28.2-8.el7.aarch64.rpm	e4851c62af1cd2bd2345169848a917d5	ELSA-2020-3977
	evince-nautilus-3.28.2-8.el7.aarch64.rpm	180f53c5d5de4703f379d5fe11b4482b	ELSA-2020-3977
	okular-4.10.5-7.el7.aarch64.rpm	ab6141dd59e74dadbd8a0473d6295ede	ELSA-2020-4024
	okular-devel-4.10.5-7.el7.aarch64.rpm	05426e2a0b70c5eaf1bae3793ef10167	ELSA-2020-4024
	okular-libs-4.10.5-7.el7.aarch64.rpm	eac45b47d28071e85889ddfc1b7e9af0	ELSA-2020-4024
	okular-part-4.10.5-7.el7.aarch64.rpm	407380d9d9ccac310c25e7889c9c7941	ELSA-2020-4024
	poppler-0.26.5-38.el7.aarch64.rpm	bd04e695dd4768437f19ff048db8a679	ELBA-2020-5015
	poppler-cpp-0.26.5-38.el7.aarch64.rpm	e338380f5109f89b96617f8b4e5e8e86	ELBA-2020-5015
	poppler-cpp-devel-0.26.5-38.el7.aarch64.rpm	7a20193ddd04abc793081904808aa097	ELBA-2020-5015
	poppler-demos-0.26.5-38.el7.aarch64.rpm	4c45d19e6f2e330ee719231f82a73d39	ELBA-2020-5015
	poppler-devel-0.26.5-38.el7.aarch64.rpm	206e4a42258b7af367ac316efee0cd52	ELBA-2020-5015
	poppler-glib-0.26.5-38.el7.aarch64.rpm	d3d29c0d2f25ff3f1d20687f5249eb65	ELBA-2020-5015
	poppler-glib-devel-0.26.5-38.el7.aarch64.rpm	2e879dc63bee185b3bfb62bf9ce70a6c	ELBA-2020-5015
	poppler-qt-0.26.5-38.el7.aarch64.rpm	fb5baed36233efab1a61d3a6f90b465a	ELBA-2020-5015
	poppler-qt-devel-0.26.5-38.el7.aarch64.rpm	949fd27bd2fa844d8f0ccfda7004193f	ELBA-2020-5015
	poppler-utils-0.26.5-38.el7.aarch64.rpm	406e42555ed427e1b7477d12610a0af7	ELBA-2020-5015
Oracle Linux 7 (x86_64)	evince-3.28.2-8.el7.src.rpm	8c217b3f81b86d9ecaf5e3e344b12587	ELSA-2020-3977
	okular-4.10.5-7.el7.src.rpm	c8ce4ce7846b96d689cff185cc140ab5	ELSA-2020-4024
	poppler-0.26.5-38.el7.src.rpm	f5b1a2eb36d1e9f14ff47a2d69a18beb	ELBA-2020-5015
	evince-3.28.2-8.el7.x86_64.rpm	8d557332b4a0027c57b28a8f17942e40	ELSA-2020-3977
	evince-browser-plugin-3.28.2-8.el7.x86_64.rpm	b406f81bcd8d4cedf1c4ba9adba7988a	ELSA-2020-3977
	evince-devel-3.28.2-8.el7.i686.rpm	574270429f7f5d685a20ff32907bc963	ELSA-2020-3977
	evince-devel-3.28.2-8.el7.x86_64.rpm	d19d45233568dd92d8af38d8cee0d8a2	ELSA-2020-3977
	evince-dvi-3.28.2-8.el7.x86_64.rpm	7a94b473273aebdbc45c4beaab3c28f4	ELSA-2020-3977
	evince-libs-3.28.2-8.el7.i686.rpm	94df61fcf667cce0f0615ca4cbb81a8f	ELSA-2020-3977
	evince-libs-3.28.2-8.el7.x86_64.rpm	83de5ac8511425e1810f0e766ebed4c9	ELSA-2020-3977
	evince-nautilus-3.28.2-8.el7.x86_64.rpm	9d33a695e2d16f68a7d9d870ed6369ee	ELSA-2020-3977
	okular-4.10.5-7.el7.x86_64.rpm	3a6217ee2b31dcde5202511602f06302	ELSA-2020-4024
	okular-devel-4.10.5-7.el7.i686.rpm	071d1062a747800841c4a0b6616b1433	ELSA-2020-4024
	okular-devel-4.10.5-7.el7.x86_64.rpm	2989ccf34efb6dc45b3084f85abef513	ELSA-2020-4024
	okular-libs-4.10.5-7.el7.i686.rpm	830c8e10870cf78382e11750b0bd8941	ELSA-2020-4024
	okular-libs-4.10.5-7.el7.x86_64.rpm	bfadd2e7ecc9e1ed35b3b1564f2e546e	ELSA-2020-4024
	okular-part-4.10.5-7.el7.x86_64.rpm	9730783d3986c052c53dfdfd2c95cd15	ELSA-2020-4024
	poppler-0.26.5-38.el7.i686.rpm	51efd581cf31ee5365439ef5b1a93556	ELBA-2020-5015
	poppler-0.26.5-38.el7.x86_64.rpm	1dcc4d83a109e833518cf21296bb0540	ELBA-2020-5015
	poppler-cpp-0.26.5-38.el7.i686.rpm	93cabff1eab44560baebfc8f9994dd4b	ELBA-2020-5015
	poppler-cpp-0.26.5-38.el7.x86_64.rpm	204801612c7328d7016be178b83aa463	ELBA-2020-5015
	poppler-cpp-devel-0.26.5-38.el7.i686.rpm	817a349624088e6ce774459255fcbcef	ELBA-2020-5015
	poppler-cpp-devel-0.26.5-38.el7.x86_64.rpm	c85e97e2c61c590a1b9ce1744d353a9e	ELBA-2020-5015
	poppler-demos-0.26.5-38.el7.x86_64.rpm	e5d7b1d082525d47dcb7c5cf5978a4b4	ELBA-2020-5015
	poppler-devel-0.26.5-38.el7.i686.rpm	47ac3d87862a42e1b01b65c4ae9940a9	ELBA-2020-5015
	poppler-devel-0.26.5-38.el7.x86_64.rpm	f4c6dc3dbd4c3069810f4c1c3a17d6cc	ELBA-2020-5015
	poppler-glib-0.26.5-38.el7.i686.rpm	3d69acaf5e2397ab059de13a2445456d	ELBA-2020-5015
	poppler-glib-0.26.5-38.el7.x86_64.rpm	f01319a3bc93d72f2e3fd889aa161874	ELBA-2020-5015
	poppler-glib-devel-0.26.5-38.el7.i686.rpm	63ae5abfcfe18fce890ce19c46c44850	ELBA-2020-5015
	poppler-glib-devel-0.26.5-38.el7.x86_64.rpm	be23f89bf4b191af686935ca691c658f	ELBA-2020-5015
	poppler-qt-0.26.5-38.el7.i686.rpm	16cedb45dc02f1ddb0b6c8656bfc3b44	ELBA-2020-5015
	poppler-qt-0.26.5-38.el7.x86_64.rpm	59ca77f53c117e1b39638950bfaf52dd	ELBA-2020-5015
	poppler-qt-devel-0.26.5-38.el7.i686.rpm	a382d26a184f7865de584afef3b89eb8	ELBA-2020-5015
	poppler-qt-devel-0.26.5-38.el7.x86_64.rpm	6198c56fe9a893a8fd0ffdc911989c55	ELBA-2020-5015
	poppler-utils-0.26.5-38.el7.x86_64.rpm	5d620f97be888e8c7475fea74d15524c	ELBA-2020-5015

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team