ELSA-2020-1074

ELSA-2020-1074 - poppler and evince security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2020-04-06

Description

evince
[3.28.2-9]
- Handle failure from TIFFReadRGBAImageOriented
- Resolves: #1717352

poppler
[0.26.5-42]
- Fix potential integer overflow and check length for negative values
- Resolves: #1757283

[0.26.5-41]
- Ignore dict Length if it is broken
- Resolves: #1733026

[0.26.5-40]
- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504

[0.26.5-39]
- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575

Related CVEs

CVE-2019-9959

CVE-2018-21009

CVE-2019-12293

CVE-2019-11459

CVE-2019-10871

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	evince-3.28.2-9.el7.src.rpm	0c8c9e9312601e578cd58cf6628facb79b19fcc71ce32ce143d21c3d6f670220	ELSA-2020-3977	ol7_aarch64_latest
	evince-3.28.2-9.el7.src.rpm	0c8c9e9312601e578cd58cf6628facb79b19fcc71ce32ce143d21c3d6f670220	ELSA-2020-3977	ol7_aarch64_optional_latest
	evince-3.28.2-9.el7.src.rpm	0c8c9e9312601e578cd58cf6628facb79b19fcc71ce32ce143d21c3d6f670220	ELSA-2020-3977	ol7_aarch64_u8_base
	poppler-0.26.5-42.el7.src.rpm	b75318c0f4af2f2d63cb337a0778de683d8f7d051410d9e73888d115f3bf3026	ELBA-2020-5015	ol7_aarch64_latest
	poppler-0.26.5-42.el7.src.rpm	b75318c0f4af2f2d63cb337a0778de683d8f7d051410d9e73888d115f3bf3026	ELBA-2020-5015	ol7_aarch64_optional_latest
	poppler-0.26.5-42.el7.src.rpm	b75318c0f4af2f2d63cb337a0778de683d8f7d051410d9e73888d115f3bf3026	ELBA-2020-5015	ol7_aarch64_u8_base
	evince-3.28.2-9.el7.aarch64.rpm	6714df0c47f564c42d31d8f798e091742f2c1a364ccba488da4b2fa58cf3d25c	ELSA-2020-3977	ol7_aarch64_latest
	evince-3.28.2-9.el7.aarch64.rpm	6714df0c47f564c42d31d8f798e091742f2c1a364ccba488da4b2fa58cf3d25c	ELSA-2020-3977	ol7_aarch64_u8_base
	evince-browser-plugin-3.28.2-9.el7.aarch64.rpm	689b84dbb0c95f73e98fdeec6d8ab9aa88e43fc05f1370353ad54e4e77dd51ea	ELSA-2020-3977	ol7_aarch64_optional_latest
	evince-devel-3.28.2-9.el7.aarch64.rpm	9a0ce3210f1909d9dcd576c0ecd53f2dc10818ed756d941b62c00ea9c3594d93	ELSA-2020-3977	ol7_aarch64_optional_latest
	evince-dvi-3.28.2-9.el7.aarch64.rpm	faecffd9a5104a14f550f28cdfa7cadedec8690b2de60c75ff7642b1a9352f1e	ELSA-2020-3977	ol7_aarch64_latest
	evince-dvi-3.28.2-9.el7.aarch64.rpm	faecffd9a5104a14f550f28cdfa7cadedec8690b2de60c75ff7642b1a9352f1e	ELSA-2020-3977	ol7_aarch64_u8_base
	evince-libs-3.28.2-9.el7.aarch64.rpm	d0bea6e93cbc7ee7c9ee968e0d65a20371fa8aa3b8a04b6ae68cb1c8dcbe6571	ELSA-2020-3977	ol7_aarch64_latest
	evince-libs-3.28.2-9.el7.aarch64.rpm	d0bea6e93cbc7ee7c9ee968e0d65a20371fa8aa3b8a04b6ae68cb1c8dcbe6571	ELSA-2020-3977	ol7_aarch64_u8_base
	evince-nautilus-3.28.2-9.el7.aarch64.rpm	cf5a6e6e2993211e9abcdc69c1c75402dd5ab6757c1f93fa2ccd7a25d8644c3e	ELSA-2020-3977	ol7_aarch64_latest
	evince-nautilus-3.28.2-9.el7.aarch64.rpm	cf5a6e6e2993211e9abcdc69c1c75402dd5ab6757c1f93fa2ccd7a25d8644c3e	ELSA-2020-3977	ol7_aarch64_u8_base
	poppler-0.26.5-42.el7.aarch64.rpm	8e70a483e368f6c93ad4c942cd13109f49b6cb28463dd8ca93a918c47fc005bc	ELBA-2020-5015	ol7_aarch64_latest
	poppler-0.26.5-42.el7.aarch64.rpm	8e70a483e368f6c93ad4c942cd13109f49b6cb28463dd8ca93a918c47fc005bc	ELBA-2020-5015	ol7_aarch64_u8_base
	poppler-cpp-0.26.5-42.el7.aarch64.rpm	84c15f17a41e8c50761c7c858364a55778994aee924059b728ec0fc51270258e	ELBA-2020-5015	ol7_aarch64_optional_latest
	poppler-cpp-devel-0.26.5-42.el7.aarch64.rpm	65c16ffae2e38e8d30d4989dadc6610ab18ef07940949d3cdf453288c78a11b5	ELBA-2020-5015	ol7_aarch64_optional_latest
	poppler-demos-0.26.5-42.el7.aarch64.rpm	91a950528ca78df8789d3d4993f6a22b03f344c8a9c31b4d4aa1519e9d4fb3e0	ELBA-2020-5015	ol7_aarch64_optional_latest
	poppler-devel-0.26.5-42.el7.aarch64.rpm	046d0913fc76c8c82bdf819e05845d0cb5890b5a30f51a7bb688f8681482be82	ELBA-2020-5015	ol7_aarch64_optional_latest
	poppler-glib-0.26.5-42.el7.aarch64.rpm	2d4f706ef5e47268cbcc36c65d92893c5324ce98326196ebbef0ad5ccf820e97	ELBA-2020-5015	ol7_aarch64_latest
	poppler-glib-0.26.5-42.el7.aarch64.rpm	2d4f706ef5e47268cbcc36c65d92893c5324ce98326196ebbef0ad5ccf820e97	ELBA-2020-5015	ol7_aarch64_u8_base
	poppler-glib-devel-0.26.5-42.el7.aarch64.rpm	40f4275eb4b256a406b62f1c8da394458ae413aad28a4253752261d573aa9c67	ELBA-2020-5015	ol7_aarch64_optional_latest
	poppler-qt-0.26.5-42.el7.aarch64.rpm	fc19414ca0dbc1c97577a94726de755abebf1951c9004301b795515360a989ae	ELBA-2020-5015	ol7_aarch64_latest
	poppler-qt-0.26.5-42.el7.aarch64.rpm	fc19414ca0dbc1c97577a94726de755abebf1951c9004301b795515360a989ae	ELBA-2020-5015	ol7_aarch64_u8_base
	poppler-qt-devel-0.26.5-42.el7.aarch64.rpm	aea64c23f0e63ad2723926fb07627f776c8c461f4973dcd3d5a68f2986bad650	ELBA-2020-5015	ol7_aarch64_optional_latest
	poppler-utils-0.26.5-42.el7.aarch64.rpm	cdbaee3c23ccdad62b91ea0f18b89b55a0dfa16ab7e1e631efe102bf5000cdcb	ELBA-2020-5015	ol7_aarch64_latest
	poppler-utils-0.26.5-42.el7.aarch64.rpm	cdbaee3c23ccdad62b91ea0f18b89b55a0dfa16ab7e1e631efe102bf5000cdcb	ELBA-2020-5015	ol7_aarch64_u8_base
Oracle Linux 7 (x86_64)	evince-3.28.2-9.el7.src.rpm	0c8c9e9312601e578cd58cf6628facb79b19fcc71ce32ce143d21c3d6f670220	ELSA-2020-3977	ol7_x86_64_latest
	evince-3.28.2-9.el7.src.rpm	0c8c9e9312601e578cd58cf6628facb79b19fcc71ce32ce143d21c3d6f670220	ELSA-2020-3977	ol7_x86_64_optional_latest
	evince-3.28.2-9.el7.src.rpm	0c8c9e9312601e578cd58cf6628facb79b19fcc71ce32ce143d21c3d6f670220	ELSA-2020-3977	ol7_x86_64_u8_base
	poppler-0.26.5-42.el7.src.rpm	b75318c0f4af2f2d63cb337a0778de683d8f7d051410d9e73888d115f3bf3026	ELBA-2020-5015	ol7_x86_64_latest
	poppler-0.26.5-42.el7.src.rpm	b75318c0f4af2f2d63cb337a0778de683d8f7d051410d9e73888d115f3bf3026	ELBA-2020-5015	ol7_x86_64_optional_latest
	poppler-0.26.5-42.el7.src.rpm	b75318c0f4af2f2d63cb337a0778de683d8f7d051410d9e73888d115f3bf3026	ELBA-2020-5015	ol7_x86_64_u8_base
	evince-3.28.2-9.el7.x86_64.rpm	cb16deb9bf8439a1eb03151e5a89f8e5ff04f4629bdb9f2bd92808daf0aed720	ELSA-2020-3977	ol7_x86_64_latest
	evince-3.28.2-9.el7.x86_64.rpm	cb16deb9bf8439a1eb03151e5a89f8e5ff04f4629bdb9f2bd92808daf0aed720	ELSA-2020-3977	ol7_x86_64_u8_base
	evince-browser-plugin-3.28.2-9.el7.x86_64.rpm	ec1ba7e26cb01b4e764d4990f6af67869415bf386b3b4f79cafbdcaeaa09fd33	ELSA-2020-3977	ol7_x86_64_optional_latest
	evince-devel-3.28.2-9.el7.i686.rpm	6a43f5e494223b8144d22fe95ac845efba3d03685ef07c3721711377c532a9c9	ELSA-2020-3977	ol7_x86_64_optional_latest
	evince-devel-3.28.2-9.el7.x86_64.rpm	bedb099974aabefa80b7f9726354176cccdea07dbc67f8a1eba0a30e6a296beb	ELSA-2020-3977	ol7_x86_64_optional_latest
	evince-dvi-3.28.2-9.el7.x86_64.rpm	9c9d28117f7dc469def95396461b3a702c68dd37785a90cfd9f1d8e2fcc767d7	ELSA-2020-3977	ol7_x86_64_latest
	evince-dvi-3.28.2-9.el7.x86_64.rpm	9c9d28117f7dc469def95396461b3a702c68dd37785a90cfd9f1d8e2fcc767d7	ELSA-2020-3977	ol7_x86_64_u8_base
	evince-libs-3.28.2-9.el7.i686.rpm	dc6365bf9743b8d45d3af387153d811cb4ee37eb156bd55797196a3c9e094ef3	ELSA-2020-3977	ol7_x86_64_latest
	evince-libs-3.28.2-9.el7.i686.rpm	dc6365bf9743b8d45d3af387153d811cb4ee37eb156bd55797196a3c9e094ef3	ELSA-2020-3977	ol7_x86_64_u8_base
	evince-libs-3.28.2-9.el7.x86_64.rpm	b302d26588b60d9af2c863491e1a813950b4da83544342190e881551ec70cb8b	ELSA-2020-3977	ol7_x86_64_latest
	evince-libs-3.28.2-9.el7.x86_64.rpm	b302d26588b60d9af2c863491e1a813950b4da83544342190e881551ec70cb8b	ELSA-2020-3977	ol7_x86_64_u8_base
	evince-nautilus-3.28.2-9.el7.x86_64.rpm	91a4b0a2c15b23c55e8ecf1c65a1287f96f49199e0ef9b46679d1a1783c20334	ELSA-2020-3977	ol7_x86_64_latest
	evince-nautilus-3.28.2-9.el7.x86_64.rpm	91a4b0a2c15b23c55e8ecf1c65a1287f96f49199e0ef9b46679d1a1783c20334	ELSA-2020-3977	ol7_x86_64_u8_base
	poppler-0.26.5-42.el7.i686.rpm	8f7e51b2c55683f88feda5feeabe297b457cefe590b3703a096412cec036dbd5	ELBA-2020-5015	ol7_x86_64_latest
	poppler-0.26.5-42.el7.i686.rpm	8f7e51b2c55683f88feda5feeabe297b457cefe590b3703a096412cec036dbd5	ELBA-2020-5015	ol7_x86_64_u8_base
	poppler-0.26.5-42.el7.x86_64.rpm	40af11390027d6c37975c46537617338d8c7721379bda1c4b4bb16a71d2aab77	ELBA-2020-5015	ol7_x86_64_latest
	poppler-0.26.5-42.el7.x86_64.rpm	40af11390027d6c37975c46537617338d8c7721379bda1c4b4bb16a71d2aab77	ELBA-2020-5015	ol7_x86_64_u8_base
	poppler-cpp-0.26.5-42.el7.i686.rpm	5a57aeab8b433dbbf45b8fed70f3589bb54297cae6cf32348eaf6c92800a208f	ELBA-2020-5015	ol7_x86_64_optional_latest
	poppler-cpp-0.26.5-42.el7.x86_64.rpm	e86301bd5bd1179d7dcf56e68fb8a125d33a74cfdc3ba00e6708bd7940aa164b	ELBA-2020-5015	ol7_x86_64_optional_latest
	poppler-cpp-devel-0.26.5-42.el7.i686.rpm	55babef325042c760a859bf1caf5ab79175e236d1264a18e4f61f7a1a1031b43	ELBA-2020-5015	ol7_x86_64_optional_latest
	poppler-cpp-devel-0.26.5-42.el7.x86_64.rpm	25c3ceb451ae12653f00e02c1dcc6901eda8b02615d0155b80eb3c45b02d0223	ELBA-2020-5015	ol7_x86_64_optional_latest
	poppler-demos-0.26.5-42.el7.x86_64.rpm	3f862ef66080ccc582f732a92507d7ff364ad9964ec13105597e4e6d166efe90	ELBA-2020-5015	ol7_x86_64_optional_latest
	poppler-devel-0.26.5-42.el7.i686.rpm	7360d4c14a4b0f9b196a51fb896b54ea295339354f4258c2ebf3cc5f92273856	ELBA-2020-5015	ol7_x86_64_optional_latest
	poppler-devel-0.26.5-42.el7.x86_64.rpm	5599ac5ee1f96afe944dd931ee8187b6449575e8017d0cc3830e1785ecf8a0fe	ELBA-2020-5015	ol7_x86_64_optional_latest
	poppler-glib-0.26.5-42.el7.i686.rpm	5056d9f89d226f0c4c1591ebc8ff51c9f65caef9ac6e14999212e2b50c1cf65c	ELBA-2020-5015	ol7_x86_64_latest
	poppler-glib-0.26.5-42.el7.i686.rpm	5056d9f89d226f0c4c1591ebc8ff51c9f65caef9ac6e14999212e2b50c1cf65c	ELBA-2020-5015	ol7_x86_64_u8_base
	poppler-glib-0.26.5-42.el7.x86_64.rpm	110268e13830bbc49ad39e6fd55078d34050c0d3ceed5a08a9b556719fa112c4	ELBA-2020-5015	ol7_x86_64_latest
	poppler-glib-0.26.5-42.el7.x86_64.rpm	110268e13830bbc49ad39e6fd55078d34050c0d3ceed5a08a9b556719fa112c4	ELBA-2020-5015	ol7_x86_64_u8_base
	poppler-glib-devel-0.26.5-42.el7.i686.rpm	335ddcc54aaabbda3a94e982e0d28f84a4561b3a0cff0014c4f69a6e8d0708be	ELBA-2020-5015	ol7_x86_64_optional_latest
	poppler-glib-devel-0.26.5-42.el7.x86_64.rpm	dfc7d9443a83afa3d9da910451cad56b5787a1d45df958645218135aceb9e0c8	ELBA-2020-5015	ol7_x86_64_optional_latest
	poppler-qt-0.26.5-42.el7.i686.rpm	493418a46872f3776f437b844338c277272acde256e7657393df117c965967f8	ELBA-2020-5015	ol7_x86_64_latest
	poppler-qt-0.26.5-42.el7.i686.rpm	493418a46872f3776f437b844338c277272acde256e7657393df117c965967f8	ELBA-2020-5015	ol7_x86_64_u8_base
	poppler-qt-0.26.5-42.el7.x86_64.rpm	afa68763f72521738de77d3c1ceb85ba4bb895b3dc21997479df24b8e1d7572f	ELBA-2020-5015	ol7_x86_64_latest
	poppler-qt-0.26.5-42.el7.x86_64.rpm	afa68763f72521738de77d3c1ceb85ba4bb895b3dc21997479df24b8e1d7572f	ELBA-2020-5015	ol7_x86_64_u8_base
	poppler-qt-devel-0.26.5-42.el7.i686.rpm	0c3b7bd3ff6c128a9f38445ece98f551c8c51998e0fb720cc653f753c5b0430e	ELBA-2020-5015	ol7_x86_64_optional_latest
	poppler-qt-devel-0.26.5-42.el7.x86_64.rpm	19813c9792331c1408cd67d89f7d8dcc7c56af591fcc1c6eeb1b63b3dbeabfc0	ELBA-2020-5015	ol7_x86_64_optional_latest
	poppler-utils-0.26.5-42.el7.x86_64.rpm	26c1f7d315717ada08da04e6d78f45b59860e2b9fb5a9c3ce232acb76e03a765	ELBA-2020-5015	ol7_x86_64_latest
	poppler-utils-0.26.5-42.el7.x86_64.rpm	26c1f7d315717ada08da04e6d78f45b59860e2b9fb5a9c3ce232acb76e03a765	ELBA-2020-5015	ol7_x86_64_u8_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team