OVMSA-2017-0147

OVMSA-2017-0147 - poppler security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2017-08-31

Description

[0.12.4-12]
- Resolves: rhbz#1479815 CVE-2017-9776

[0.12.4-11]
- Don't crash on streams without Length
- Resolves: #1302365

[0.12.4-10]
- Use better default pixel size for printing of 0 width lines
- Resolves: #1316163

[0.12.4-9]
- Identification of fonts directly from streams and files
- Resolves: #1208719

[0.12.4-8]
- Embed type1 fonts to PostScript files correctly
- Resolves: #1232210

[0.12.4-7]
- Fix lines disappearing when selecting paragraph
- Resolves: #614824

[0.12.4-6]
- Silence illegal entry in bfrange block in ToUnicode CMap
- Resolves: #710816

[0.12.4-5]
- Fix captions of push button fields.
- Resolves: #1191907

[0.12.4-4]
- Add poppler-0.12.4-CVE-2010-3702.patch
(Properly initialize parser)
- Add poppler-0.12.4-CVE-2010-3703.patch
(Properly initialize stack)
- Add poppler-0.12.4-CVE-2010-3704.patch
(Fix crash in broken pdf (code < 0))
- Resolves: #639860

Related CVEs

CVE-2017-9776

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle VM 3.3 (x86_64)	poppler-0.12.4-12.el6_9.src.rpm	328b252a45cc5a13d957297f79feba29810a2827297fa162239981807af3661d	-	ovm3_x86_64_3.3_patch
	poppler-0.12.4-12.el6_9.x86_64.rpm	2f1f14fbba9e1141f7269d8aa5fd671e5863c12863908ae1461c188263ab89fe	-	ovm3_x86_64_3.3_patch
	poppler-utils-0.12.4-12.el6_9.x86_64.rpm	40ff27351267d2fab941451c63d9fc60f23e0f9a2753447fff0f69965046337e	-	ovm3_x86_64_3.3_patch
Oracle VM 3.4 (x86_64)	poppler-0.12.4-12.el6_9.src.rpm	328b252a45cc5a13d957297f79feba29810a2827297fa162239981807af3661d	-	ovm34_x86_64_latest
	poppler-0.12.4-12.el6_9.x86_64.rpm	2f1f14fbba9e1141f7269d8aa5fd671e5863c12863908ae1461c188263ab89fe	-	ovm34_x86_64_latest
	poppler-utils-0.12.4-12.el6_9.x86_64.rpm	40ff27351267d2fab941451c63d9fc60f23e0f9a2753447fff0f69965046337e	-	ovm34_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team