Red Hat Security AdvisoryRHSA-2023:2810
poppler security update
Released 2023-05-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) poppler-20.11.0-6.el8, poppler-glib-20.11.0-6.el8, poppler-qt5-20.11.0-6.el8 +1
- Red Hat Enterprise Linux CRB (v. 8) poppler-cpp-20.11.0-6.el8, poppler-cpp-devel-20.11.0-6.el8, poppler-devel-20.11.0-6.el8 +2
Fixes 1 record
Priority LOW 35
Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc).
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00634 · Published 2022-08-30 · Partial fix CWE-190
