ELSA-2019-2713

ELSA-2019-2713 - poppler security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2019-09-12

Description

[0.66.0-11.el8_0.12]
- Ignore dict Length if it is broken
- Resolves: #1741146

[0.66.0-11.el8_0.11]
- Check whether input is RGB in PSOutputDev::checkPageSlice()
- (also when using '-optimizecolorspace' flag)
- Resolves: #1741145

[0.66.0-11.el8_0.10]
- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1740612

[0.66.0-11.el8_0.9]
- Fix stack overflow on broken file
- Resolves: #1717867

[0.66.0-11.el8_0.8]
- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1717866

[0.66.0-11.el8_0.7]
- Fix possible crash on broken files in ImageStream::getLine()
- Resolves: #1717803

[0.66.0-11.el8_0.6]
- Move the fileSpec.dictLookup call inside fileSpec.isDict if
- Resolves: #1717788

[0.66.0-11.el8_0.5]
- Defend against requests for negative XRef indices
- Resolves: #1717779

[0.66.0-11.el8_0.4]
- Do not try to parse into unallocated XRef entry
- Resolves: #1717790

[0.66.0-11.el8_0.3]
- Avoid global display profile state becoming an uncontrolled
- memory leak
- Resolves: #1717776

[0.66.0-11.el8_0.2]
- Check Catalog from XRef for being a Dict
- Resolves: #1690480

[0.66.0-11.el8_0.1]
- Do not try to construct invalid rich media annotation assets
- Resolves: #1690478

[0.66.0-11]
- Fix tiling patterns when pattern cell is too far
- Resolves: #1644094

Related CVEs

CVE-2018-18897

CVE-2018-20662

CVE-2019-7310

CVE-2019-10871

CVE-2019-12293

CVE-2018-20551

CVE-2019-9959

CVE-2019-9903

CVE-2018-20481

CVE-2018-20650

CVE-2019-9200

CVE-2019-9631

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	poppler-0.66.0-11.el8_0.12.src.rpm	1cf5060a68033ce7315d5566a902b9785037b6465be8070066a28165e8bb3904	-	ol8_aarch64_appstream
	poppler-0.66.0-11.el8_0.12.src.rpm	1cf5060a68033ce7315d5566a902b9785037b6465be8070066a28165e8bb3904	-	ol8_aarch64_codeready_builder
	poppler-0.66.0-11.el8_0.12.aarch64.rpm	51b248e9a10a96bba90542c54fd4a82c37d5121c72cdbf50af1fcee464b01ad6	-	ol8_aarch64_appstream
	poppler-cpp-0.66.0-11.el8_0.12.aarch64.rpm	fc26cd0c25abf4ce9015b37dedc011d161c993cc2ba14f7ba2eeb1abcae7aa15	-	ol8_aarch64_codeready_builder
	poppler-cpp-devel-0.66.0-11.el8_0.12.aarch64.rpm	69234bef688bfd0cd19ab224f6a63abe0fe358debe68fb37bbcb3465a783320b	-	ol8_aarch64_codeready_builder
	poppler-devel-0.66.0-11.el8_0.12.aarch64.rpm	0b1cd6d559263304a40b89a5d585867afd250f9f93f8e1c2134e9989f86f3c01	-	ol8_aarch64_codeready_builder
	poppler-glib-0.66.0-11.el8_0.12.aarch64.rpm	82c8dd9be59a46a60db2348110326f1fa9962d54f9733bf10e2701f3fc38095f	-	ol8_aarch64_appstream
	poppler-glib-devel-0.66.0-11.el8_0.12.aarch64.rpm	7e03af2926469da8e9060b72aef14b5f86cf52e86e6c6496eba44368b4dd4c56	-	ol8_aarch64_codeready_builder
	poppler-qt5-0.66.0-11.el8_0.12.aarch64.rpm	60d3a437271326ab6726c77b21898e4a98cb8d651db041b7a408de48105af070	-	ol8_aarch64_codeready_builder
	poppler-qt5-devel-0.66.0-11.el8_0.12.aarch64.rpm	d9863bf814beeb0bd8565b5a7a0bf7b89bc3242ba049a70941ffd33a774f6af6	-	ol8_aarch64_codeready_builder
	poppler-utils-0.66.0-11.el8_0.12.aarch64.rpm	6cc7ad513b3aed24fe7d0f375859939214a9910932380121ef933edd4e15e64b	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	poppler-0.66.0-11.el8_0.12.src.rpm	1cf5060a68033ce7315d5566a902b9785037b6465be8070066a28165e8bb3904	-	ol8_x86_64_appstream
	poppler-0.66.0-11.el8_0.12.src.rpm	1cf5060a68033ce7315d5566a902b9785037b6465be8070066a28165e8bb3904	-	ol8_x86_64_codeready_builder
	poppler-0.66.0-11.el8_0.12.i686.rpm	58dc5e69ab22ce6b719f536cdcae9c6b1b08d8ff1f8cd5de825bdf05c0de3005	-	ol8_x86_64_appstream
	poppler-0.66.0-11.el8_0.12.x86_64.rpm	64326bb9c35e25779d162638c5f9a92730f2384684d59d75be190fb32a0f7aa5	-	ol8_x86_64_appstream
	poppler-cpp-0.66.0-11.el8_0.12.i686.rpm	caabfd03dce8d2d062cdef5fd1cc61a36f2770fbb45b1e9f3de42939ee1e627e	-	ol8_x86_64_codeready_builder
	poppler-cpp-0.66.0-11.el8_0.12.x86_64.rpm	7f1cb560b7dbc459c4fb7f6959defd8e4c0a9632a6990805db35c0abcbdbee0b	-	ol8_x86_64_codeready_builder
	poppler-cpp-devel-0.66.0-11.el8_0.12.i686.rpm	a38e39e008a52f7cf0c764b2e63d99a9bb521b5f3e9a74426dcaa38d4a81d5f1	-	ol8_x86_64_codeready_builder
	poppler-cpp-devel-0.66.0-11.el8_0.12.x86_64.rpm	68a311c59d02920342c470aafff98a8f76b90355f967eb22319367e971103121	-	ol8_x86_64_codeready_builder
	poppler-devel-0.66.0-11.el8_0.12.i686.rpm	c538be08dc2b5c421615e764eb14a3b215314ad580a73d68ff21755d12c62e89	-	ol8_x86_64_codeready_builder
	poppler-devel-0.66.0-11.el8_0.12.x86_64.rpm	bc04d9f22e6947403b41ddb1f04b8263ca49d67d49e46572977ed43379f26dfb	-	ol8_x86_64_codeready_builder
	poppler-glib-0.66.0-11.el8_0.12.i686.rpm	fb825a8a4c73705df11c0cfc72439f31d7cf532f89be0447ae9a996aa9e5a723	-	ol8_x86_64_appstream
	poppler-glib-0.66.0-11.el8_0.12.x86_64.rpm	acd896880909b06727e0b8cd0f6e38549939654f515fc49edc99eab1c6c5a214	-	ol8_x86_64_appstream
	poppler-glib-devel-0.66.0-11.el8_0.12.i686.rpm	738a7b98fbe8b90867ca4776f62f75f3370ad6bf944abe6c376c630c281bda93	-	ol8_x86_64_codeready_builder
	poppler-glib-devel-0.66.0-11.el8_0.12.x86_64.rpm	b168bb9f3aa971d869be4d4de36611136263ff9e4e4ee71fb7c8b5634b21e3de	-	ol8_x86_64_codeready_builder
	poppler-qt5-0.66.0-11.el8_0.12.i686.rpm	c48860b55a2118ab94b7f5ca16465558c88f000a8b5040462e6cf9b95e7f06b2	-	ol8_x86_64_codeready_builder
	poppler-qt5-0.66.0-11.el8_0.12.x86_64.rpm	6ce54a489ce1adcc4864984b3bd4715a40975d6b0b70db0283d04c62fe64d966	-	ol8_x86_64_codeready_builder
	poppler-qt5-devel-0.66.0-11.el8_0.12.i686.rpm	1b08cf4b29e9093512fa4fe954e363c96256a2104a161ee8f15f644697dafde1	-	ol8_x86_64_codeready_builder
	poppler-qt5-devel-0.66.0-11.el8_0.12.x86_64.rpm	14ea61438f55dc828fcee9edc0df54f9f2f375dea85abb29ac0d595b45f75c02	-	ol8_x86_64_codeready_builder
	poppler-utils-0.66.0-11.el8_0.12.x86_64.rpm	b256251ce3d96b77df2690e1507e1cb86cd1e54f0f69472dc034de1fdd1a0d92	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team