Red Hat Security AdvisoryRHSA-2010:0859
poppler security update
Released 2010-11-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) poppler-0.12.4-3.el6_0.1, poppler-glib-0.12.4-3.el6_0.1, poppler-qt4-0.12.4-3.el6_0.1 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) poppler-0.12.4-3.el6_0.1, poppler-devel-0.12.4-3.el6_0.1, poppler-glib-devel-0.12.4-3.el6_0.1 +4
- Red Hat Enterprise Linux HPC Node (v. 6) poppler-0.12.4-3.el6_0.1, poppler-utils-0.12.4-3.el6_0.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) poppler-0.12.4-3.el6_0.1, poppler-devel-0.12.4-3.el6_0.1, poppler-glib-0.12.4-3.el6_0.1 +5
- Red Hat Enterprise Linux Server (v. 6) poppler-0.12.4-3.el6_0.1, poppler-0.12.4-3.el6_0.1.ppc, poppler-glib-0.12.4-3.el6_0.1 +3
- Red Hat Enterprise Linux Server Optional (v. 6) poppler-0.12.4-3.el6_0.1, poppler-devel-0.12.4-3.el6_0.1, poppler-devel-0.12.4-3.el6_0.1.ppc +10
- Red Hat Enterprise Linux Workstation (v. 6) poppler-0.12.4-3.el6_0.1, poppler-glib-0.12.4-3.el6_0.1, poppler-qt4-0.12.4-3.el6_0.1 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) poppler-0.12.4-3.el6_0.1, poppler-devel-0.12.4-3.el6_0.1, poppler-glib-devel-0.12.4-3.el6_0.1 +4
Fixes 3 records
Priority LOW 38
The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a deni…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02757 · Published 2010-11-05 · Partial fix CWE-476
Priority LOW 36
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attac…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03597 · Published 2010-11-05 · Fixed CWE-20
Priority LOW 25
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to c…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02561 · Published 2010-11-05 · Fixed CWE-20
THREATIST.IORead the docs