Red Hat Security AdvisoryRHSA-2023:2259
poppler security and bug fix update
Released 2023-05-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) poppler-21.01.0-14.el9, poppler-cpp-21.01.0-14.el9, poppler-glib-21.01.0-14.el9 +2
- Red Hat Enterprise Linux CRB (v. 9) poppler-cpp-devel-21.01.0-14.el9, poppler-devel-21.01.0-14.el9, poppler-glib-devel-21.01.0-14.el9 +1
Fixes 1 record
Priority LOW 35
Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc).
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00634 · Published 2022-08-30 · Partial fix CWE-190