Security update for poppler SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:1626-1 Final 1 1 2020-06-16T07:35:06Z current 2020-06-16T07:35:06Z 2020-06-16T07:35:06Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for poppler This update for poppler fixes the following issues: These security issues were fixed: - CVE-2017-14617: Fixed a floating point exception in Stream.cc, which may lead to a potential attack when handling malicious PDF files. (bsc#1060220) - CVE-2017-1000456: Validate boundaries in TextPool::addWord to prevent overflows in subsequent calculations (bsc#1074453) - CVE-2017-15565: Prevent NULL Pointer dereference in the GfxImageColorMap::getGrayLine() function via a crafted PDF document (bsc#1064593) - CVE-2018-10768: Prevent NULL pointer dereference in the AnnotPath::getCoordsLength function. A crafted input could have lead to a remote denial of service attack (bsc#1092105). This update also fixes an additional segmentation fault that is trigger by the reproducer for CVE-2017-14517 (bsc#1059066). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2020-1626,SUSE-SLE-SDK-12-SP4-2020-1626,SUSE-SLE-SDK-12-SP5-2020-1626 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20201626-1/ Link for SUSE-SU-2020:1626-1 https://lists.suse.com/pipermail/sle-security-updates/2020-June/006944.html E-Mail link for SUSE-SU-2020:1626-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1059066 SUSE Bug 1059066 https://bugzilla.suse.com/1060220 SUSE Bug 1060220 https://bugzilla.suse.com/1064593 SUSE Bug 1064593 https://bugzilla.suse.com/1074453 SUSE Bug 1074453 https://bugzilla.suse.com/1092105 SUSE Bug 1092105 https://www.suse.com/security/cve/CVE-2017-1000456/ SUSE CVE CVE-2017-1000456 page https://www.suse.com/security/cve/CVE-2017-14517/ SUSE CVE CVE-2017-14517 page https://www.suse.com/security/cve/CVE-2017-14617/ SUSE CVE CVE-2017-14617 page https://www.suse.com/security/cve/CVE-2017-15565/ SUSE CVE CVE-2017-15565 page https://www.suse.com/security/cve/CVE-2018-10768/ SUSE CVE CVE-2018-10768 page SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 libpoppler-cpp0-0.24.4-14.16.6 libpoppler-devel-0.24.4-14.16.6 libpoppler-glib-devel-0.24.4-14.16.6 libpoppler-glib8-0.24.4-14.16.6 libpoppler-qt4-4-0.24.4-14.16.6 libpoppler-qt4-devel-0.24.4-14.16.6 libpoppler44-0.24.4-14.16.6 poppler-tools-0.24.4-14.16.6 typelib-1_0-Poppler-0_18-0.24.4-14.16.6 libpoppler44-0.24.4-14.16.6 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libpoppler44-0.24.4-14.16.6 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations. CVE-2017-1000456 SUSE Linux Enterprise Software Development Kit 12 SP4:libpoppler44-0.24.4-14.16.6 SUSE Linux Enterprise Software Development Kit 12 SP5:libpoppler44-0.24.4-14.16.6 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201626-1/ https://www.suse.com/security/cve/CVE-2017-1000456.html CVE-2017-1000456 https://bugzilla.suse.com/1074453 SUSE Bug 1074453 In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function in XRef.cc via a crafted PDF document. CVE-2017-14517 SUSE Linux Enterprise Software Development Kit 12 SP4:libpoppler44-0.24.4-14.16.6 SUSE Linux Enterprise Software Development Kit 12 SP5:libpoppler44-0.24.4-14.16.6 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201626-1/ https://www.suse.com/security/cve/CVE-2017-14517.html CVE-2017-14517 https://bugzilla.suse.com/1059066 SUSE Bug 1059066 In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files. CVE-2017-14617 SUSE Linux Enterprise Software Development Kit 12 SP4:libpoppler44-0.24.4-14.16.6 SUSE Linux Enterprise Software Development Kit 12 SP5:libpoppler44-0.24.4-14.16.6 low 1.7 AV:L/AC:L/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201626-1/ https://www.suse.com/security/cve/CVE-2017-14617.html CVE-2017-14617 https://bugzilla.suse.com/1060220 SUSE Bug 1060220 In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via a crafted PDF document. CVE-2017-15565 SUSE Linux Enterprise Software Development Kit 12 SP4:libpoppler44-0.24.4-14.16.6 SUSE Linux Enterprise Software Development Kit 12 SP5:libpoppler44-0.24.4-14.16.6 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201626-1/ https://www.suse.com/security/cve/CVE-2017-15565.html CVE-2017-15565 https://bugzilla.suse.com/1064593 SUSE Bug 1064593 There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected. CVE-2018-10768 SUSE Linux Enterprise Software Development Kit 12 SP4:libpoppler44-0.24.4-14.16.6 SUSE Linux Enterprise Software Development Kit 12 SP5:libpoppler44-0.24.4-14.16.6 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201626-1/ https://www.suse.com/security/cve/CVE-2018-10768.html CVE-2018-10768 https://bugzilla.suse.com/1092105 SUSE Bug 1092105