Red Hat Security AdvisoryRHSA-2016:2580
poppler security and bug fix update
Released 2016-11-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) poppler-0.26.5-16.el7, poppler-glib-0.26.5-16.el7, poppler-qt-0.26.5-16.el7 +1
- Red Hat Enterprise Linux Client Optional (v. 7) poppler-cpp-0.26.5-16.el7, poppler-cpp-devel-0.26.5-16.el7, poppler-demos-0.26.5-16.el7 +3
- Red Hat Enterprise Linux ComputeNode (v. 7) poppler-0.26.5-16.el7, poppler-qt-0.26.5-16.el7, poppler-utils-0.26.5-16.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) poppler-cpp-0.26.5-16.el7, poppler-cpp-devel-0.26.5-16.el7, poppler-demos-0.26.5-16.el7 +4
- Red Hat Enterprise Linux Server (v. 7) poppler-0.26.5-16.el7, poppler-0.26.5-16.el7.ppc, poppler-glib-0.26.5-16.el7 +3
- Red Hat Enterprise Linux Server Optional (v. 7) poppler-cpp-0.26.5-16.el7, poppler-cpp-0.26.5-16.el7.ppc, poppler-cpp-devel-0.26.5-16.el7 +10
- Red Hat Enterprise Linux Workstation (v. 7) poppler-0.26.5-16.el7, poppler-glib-0.26.5-16.el7, poppler-qt-0.26.5-16.el7 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) poppler-cpp-0.26.5-16.el7, poppler-cpp-devel-0.26.5-16.el7, poppler-demos-0.26.5-16.el7 +3
Fixes 1 record
Priority MEDIUM 41
Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrar…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.04557 · Published 2016-05-06 · Partial fix CWE-119
