Security update for poppler SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:1999-1 Final 1 1 2017-07-28T16:08:36Z current 2017-07-28T16:08:36Z 2017-07-28T16:08:36Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for poppler This update for poppler fixes the following issues: Security issues fixed: - CVE-2017-9775: DoS stack buffer overflow in GfxState.cc in pdftocairo via a crafted PDF document (bsc#1045719) - CVE-2017-9776: DoS integer overflow leading to heap buffer overflow in JBIG2Stream.cc via a crafted PDF document (bsc#1045721) - CVE-2017-7515: Stack exhaustion due to infinite recursive call in pdfunite (bsc#1043088) - CVE-2017-7511: Null pointer dereference in pdfunite via crafted documents (bsc#1041783) - CVE-2017-9406: Memory leak in the gmalloc function in gmem.cc (bsc#1042803) - CVE-2017-9408: Memory leak in the Object::initArray function (bsc#1042802) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-SP2-2017-1237,SUSE-SLE-DESKTOP-12-SP3-2017-1237,SUSE-SLE-RPI-12-SP2-2017-1237,SUSE-SLE-SDK-12-SP2-2017-1237,SUSE-SLE-SDK-12-SP3-2017-1237,SUSE-SLE-SERVER-12-SP2-2017-1237,SUSE-SLE-SERVER-12-SP3-2017-1237 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20171999-1/ Link for SUSE-SU-2017:1999-1 https://lists.suse.com/pipermail/sle-security-updates/2017-July/003076.html E-Mail link for SUSE-SU-2017:1999-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1041783 SUSE Bug 1041783 https://bugzilla.suse.com/1042802 SUSE Bug 1042802 https://bugzilla.suse.com/1042803 SUSE Bug 1042803 https://bugzilla.suse.com/1043088 SUSE Bug 1043088 https://bugzilla.suse.com/1045719 SUSE Bug 1045719 https://bugzilla.suse.com/1045721 SUSE Bug 1045721 https://www.suse.com/security/cve/CVE-2017-7511/ SUSE CVE CVE-2017-7511 page https://www.suse.com/security/cve/CVE-2017-7515/ SUSE CVE CVE-2017-7515 page https://www.suse.com/security/cve/CVE-2017-9406/ SUSE CVE CVE-2017-9406 page https://www.suse.com/security/cve/CVE-2017-9408/ SUSE CVE CVE-2017-9408 page https://www.suse.com/security/cve/CVE-2017-9775/ SUSE CVE CVE-2017-9775 page https://www.suse.com/security/cve/CVE-2017-9776/ SUSE CVE CVE-2017-9776 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 libpoppler-glib8-0.43.0-16.5.1 libpoppler-qt4-4-0.43.0-16.5.1 libpoppler60-0.43.0-16.5.1 poppler-tools-0.43.0-16.5.1 libpoppler-cpp0-0.43.0-16.5.1 libpoppler-devel-0.43.0-16.5.1 libpoppler-glib-devel-0.43.0-16.5.1 libpoppler-qt4-devel-0.43.0-16.5.1 typelib-1_0-Poppler-0_18-0.43.0-16.5.1 libpoppler-glib8-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libpoppler-qt4-4-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libpoppler60-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 poppler-tools-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libpoppler-glib8-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libpoppler-qt4-4-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libpoppler60-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 poppler-tools-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libpoppler-glib8-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server 12 SP2 libpoppler-qt4-4-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server 12 SP2 libpoppler60-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server 12 SP2 poppler-tools-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server 12 SP2 libpoppler-glib8-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server 12 SP3 libpoppler-qt4-4-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server 12 SP3 libpoppler60-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server 12 SP3 poppler-tools-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server 12 SP3 libpoppler-glib8-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libpoppler-qt4-4-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libpoppler60-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 poppler-tools-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libpoppler-glib8-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libpoppler-qt4-4-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libpoppler60-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 poppler-tools-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libpoppler-glib8-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libpoppler-qt4-4-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libpoppler60-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 poppler-tools-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libpoppler-cpp0-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libpoppler-devel-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libpoppler-glib-devel-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libpoppler-qt4-devel-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 typelib-1_0-Poppler-0_18-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libpoppler-cpp0-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libpoppler-devel-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libpoppler-glib-devel-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libpoppler-qt4-devel-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 typelib-1_0-Poppler-0_18-0.43.0-16.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents. CVE-2017-7511 SUSE Linux Enterprise Desktop 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-cpp0-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-glib-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-qt4-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:typelib-1_0-Poppler-0_18-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-cpp0-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-glib-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-qt4-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:typelib-1_0-Poppler-0_18-0.43.0-16.5.1 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171999-1/ https://www.suse.com/security/cve/CVE-2017-7511.html CVE-2017-7511 https://bugzilla.suse.com/1041783 SUSE Bug 1041783 poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service. CVE-2017-7515 SUSE Linux Enterprise Desktop 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-cpp0-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-glib-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-qt4-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:typelib-1_0-Poppler-0_18-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-cpp0-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-glib-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-qt4-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:typelib-1_0-Poppler-0_18-0.43.0-16.5.1 moderate 1.7 AV:L/AC:L/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171999-1/ https://www.suse.com/security/cve/CVE-2017-7515.html CVE-2017-7515 https://bugzilla.suse.com/1043088 SUSE Bug 1043088 In Poppler 0.54.0, a memory leak vulnerability was found in the function gmalloc in gmem.cc, which allows attackers to cause a denial of service via a crafted file. CVE-2017-9406 SUSE Linux Enterprise Desktop 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-cpp0-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-glib-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-qt4-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:typelib-1_0-Poppler-0_18-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-cpp0-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-glib-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-qt4-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:typelib-1_0-Poppler-0_18-0.43.0-16.5.1 low 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171999-1/ https://www.suse.com/security/cve/CVE-2017-9406.html CVE-2017-9406 https://bugzilla.suse.com/1042803 SUSE Bug 1042803 In Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in Object.cc, which allows attackers to cause a denial of service via a crafted file. CVE-2017-9408 SUSE Linux Enterprise Desktop 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-cpp0-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-glib-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-qt4-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:typelib-1_0-Poppler-0_18-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-cpp0-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-glib-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-qt4-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:typelib-1_0-Poppler-0_18-0.43.0-16.5.1 low 1.7 AV:L/AC:L/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171999-1/ https://www.suse.com/security/cve/CVE-2017-9408.html CVE-2017-9408 https://bugzilla.suse.com/1042802 SUSE Bug 1042802 Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document. CVE-2017-9775 SUSE Linux Enterprise Desktop 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-cpp0-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-glib-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-qt4-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:typelib-1_0-Poppler-0_18-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-cpp0-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-glib-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-qt4-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:typelib-1_0-Poppler-0_18-0.43.0-16.5.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171999-1/ https://www.suse.com/security/cve/CVE-2017-9775.html CVE-2017-9775 https://bugzilla.suse.com/1045719 SUSE Bug 1045719 Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document. CVE-2017-9776 SUSE Linux Enterprise Desktop 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Desktop 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler-glib8-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler-qt4-4-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpoppler60-0.43.0-16.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:poppler-tools-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-cpp0-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-glib-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libpoppler-qt4-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:typelib-1_0-Poppler-0_18-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-cpp0-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-glib-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libpoppler-qt4-devel-0.43.0-16.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:typelib-1_0-Poppler-0_18-0.43.0-16.5.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171999-1/ https://www.suse.com/security/cve/CVE-2017-9776.html CVE-2017-9776 https://bugzilla.suse.com/1045721 SUSE Bug 1045721