ELSA-2020-1074

ELSA-2020-1074 - poppler and evince security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2020-04-06

Description

evince
[3.28.2-9]
- Handle failure from TIFFReadRGBAImageOriented
- Resolves: #1717352

poppler
[0.26.5-42]
- Fix potential integer overflow and check length for negative values
- Resolves: #1757283

[0.26.5-41]
- Ignore dict Length if it is broken
- Resolves: #1733026

[0.26.5-40]
- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504

[0.26.5-39]
- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575

Related CVEs

CVE-2019-9959

CVE-2019-10871

CVE-2019-12293

CVE-2019-11459

CVE-2018-21009

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	evince-3.28.2-9.el7.src.rpm	27c5d94621e3f03f97949344aab18f15	ELSA-2020-3977
	poppler-0.26.5-42.el7.src.rpm	323bf16d9c62fc9b6f45e4700e2b4ce0	ELBA-2020-5015
	evince-3.28.2-9.el7.aarch64.rpm	bef179da86211b58b68efcd61b40bf31	ELSA-2020-3977
	evince-browser-plugin-3.28.2-9.el7.aarch64.rpm	3f6651b12c1790d52c67ad8ed27e5397	ELSA-2020-3977
	evince-devel-3.28.2-9.el7.aarch64.rpm	3d15c15a92c2b83acd641b3a9928d1ce	ELSA-2020-3977
	evince-dvi-3.28.2-9.el7.aarch64.rpm	5be1e57f606e320b507ce342cbed611e	ELSA-2020-3977
	evince-libs-3.28.2-9.el7.aarch64.rpm	67dd9d576f3d48e2442de339f82e11bb	ELSA-2020-3977
	evince-nautilus-3.28.2-9.el7.aarch64.rpm	60002b096abffc28dea7e8a241702b15	ELSA-2020-3977
	poppler-0.26.5-42.el7.aarch64.rpm	e99ee7abdffd8a90f5f72052fe173366	ELBA-2020-5015
	poppler-cpp-0.26.5-42.el7.aarch64.rpm	a5f68f1a541a34ef8010b1804293fa94	ELBA-2020-5015
	poppler-cpp-devel-0.26.5-42.el7.aarch64.rpm	4d794d04bed7fafa869458f789dfe3a1	ELBA-2020-5015
	poppler-demos-0.26.5-42.el7.aarch64.rpm	9f392505b5d4a73b2b57b0e7ce4e2095	ELBA-2020-5015
	poppler-devel-0.26.5-42.el7.aarch64.rpm	30dcdda7d4007e01e7a8e5c44146699d	ELBA-2020-5015
	poppler-glib-0.26.5-42.el7.aarch64.rpm	f688db403536d9dad6e6ecac0d5177b1	ELBA-2020-5015
	poppler-glib-devel-0.26.5-42.el7.aarch64.rpm	be4130dd2963a84487bf6966ef2282e2	ELBA-2020-5015
	poppler-qt-0.26.5-42.el7.aarch64.rpm	a38a236ad045cb07e06c5982fc66d815	ELBA-2020-5015
	poppler-qt-devel-0.26.5-42.el7.aarch64.rpm	476040efac351dcbd1947f9e64447b01	ELBA-2020-5015
	poppler-utils-0.26.5-42.el7.aarch64.rpm	e0ce3db2ecc09fbeb72c0add1658471e	ELBA-2020-5015
Oracle Linux 7 (x86_64)	evince-3.28.2-9.el7.src.rpm	27c5d94621e3f03f97949344aab18f15	ELSA-2020-3977
	poppler-0.26.5-42.el7.src.rpm	323bf16d9c62fc9b6f45e4700e2b4ce0	ELBA-2020-5015
	evince-3.28.2-9.el7.x86_64.rpm	d5782852488e5c71dcf121a72da0c2ca	ELSA-2020-3977
	evince-browser-plugin-3.28.2-9.el7.x86_64.rpm	826ca7c806449dd208702bf920580aad	ELSA-2020-3977
	evince-devel-3.28.2-9.el7.i686.rpm	0a4ae654605e0bf2619486e29e79bb49	ELSA-2020-3977
	evince-devel-3.28.2-9.el7.x86_64.rpm	d31f7c10c0f5b2892e418cebd50390bc	ELSA-2020-3977
	evince-dvi-3.28.2-9.el7.x86_64.rpm	2252249b1c1481e492fe2ce6cd298f09	ELSA-2020-3977
	evince-libs-3.28.2-9.el7.i686.rpm	bf1117ce09de4a0ba0605d11bfc82fe6	ELSA-2020-3977
	evince-libs-3.28.2-9.el7.x86_64.rpm	8b6e52340c87eb3727627d7801f11c54	ELSA-2020-3977
	evince-nautilus-3.28.2-9.el7.x86_64.rpm	f029f705e477644f6c3b7b3a7ca6f073	ELSA-2020-3977
	poppler-0.26.5-42.el7.i686.rpm	762ab2387cd93f053de8e31e30dc1b9c	ELBA-2020-5015
	poppler-0.26.5-42.el7.x86_64.rpm	74e1e009a358ab37d6467c3fda064788	ELBA-2020-5015
	poppler-cpp-0.26.5-42.el7.i686.rpm	20d61c1a92ea3d164143df1146f1e9ad	ELBA-2020-5015
	poppler-cpp-0.26.5-42.el7.x86_64.rpm	f832f585879323fb51ced1cf71264766	ELBA-2020-5015
	poppler-cpp-devel-0.26.5-42.el7.i686.rpm	f5a17541e0a4c2482f7c8dc0b66cfcbe	ELBA-2020-5015
	poppler-cpp-devel-0.26.5-42.el7.x86_64.rpm	7f1c831c915dae5fd3cc9fbd66c435e1	ELBA-2020-5015
	poppler-demos-0.26.5-42.el7.x86_64.rpm	9229ae9dadae44faafabb41e30921f27	ELBA-2020-5015
	poppler-devel-0.26.5-42.el7.i686.rpm	3241b30801ef3bad851040467f2089d8	ELBA-2020-5015
	poppler-devel-0.26.5-42.el7.x86_64.rpm	a8aad1c1e813efd683e409aa71f336ba	ELBA-2020-5015
	poppler-glib-0.26.5-42.el7.i686.rpm	e06205b606fef221fddb5da413c8e747	ELBA-2020-5015
	poppler-glib-0.26.5-42.el7.x86_64.rpm	83f1e922969b30e0274727be38a6f791	ELBA-2020-5015
	poppler-glib-devel-0.26.5-42.el7.i686.rpm	f3c6607de4e6726b5debdb345d20685e	ELBA-2020-5015
	poppler-glib-devel-0.26.5-42.el7.x86_64.rpm	28720af13e7215dc49979317f0f031bc	ELBA-2020-5015
	poppler-qt-0.26.5-42.el7.i686.rpm	d398b40f41e5d6ca3fd4c0cadac01b45	ELBA-2020-5015
	poppler-qt-0.26.5-42.el7.x86_64.rpm	052ef367d851440eff70ae1421c988b4	ELBA-2020-5015
	poppler-qt-devel-0.26.5-42.el7.i686.rpm	d8fcfc74d7d49b5514630e55c77765a8	ELBA-2020-5015
	poppler-qt-devel-0.26.5-42.el7.x86_64.rpm	b7841756397f3bc152ba798673f04b9f	ELBA-2020-5015
	poppler-utils-0.26.5-42.el7.x86_64.rpm	e3c4ff70dfcc4b229c032d54f83877b6	ELBA-2020-5015

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team