Lucene search

K
oraclelinuxOracleLinuxELSA-2019-2022
HistoryAug 13, 2019 - 12:00 a.m.

poppler security, bug fix, and enhancement update

2019-08-1300:00:00
linux.oracle.com
15

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.037 Low

EPSS

Percentile

90.8%

evince
[3.28.2-8]

  • Do not free EvDocumentInfo in ev_window_save_print_settings(),
  • it is freed in EvDocuments destructor
  • Resolves: #1541358
    [3.28.2-7]
  • Do not store page-scaling for documents with enforced
  • page-scaling
  • Resolves: #1541358
    [3.28.2-6]
  • Use PrintScaling preference stored in PDFs
  • Resolves: #1541358
    okular
    [4.10.5-7]
  • Fix patch adding information about substituting font
    Resolves: bz#1458037
    [4.10.5-6]
  • Fix broken dependency on kde-runtime
    Resolves: bz#1670723
    [4.10.5-5]
  • Add information about substituting font
    Resolves: bz#1458037
    poppler
    [0.26.5-38]
  • Constrain number of cycles in rescale filter
  • Compute correct coverage values for box filter
  • Resolves: #1688417
    [0.26.5-37]
  • Fix tiling patterns when pattern cell is too far
  • Resolves: #1378961
    [0.26.5-36]
  • Fix version from which PrintScaling is available
  • Resolves: #1658304
    [0.26.5-35]
  • Export PrintScaling viewer preference in glib frontend
  • Related: #1658304
    [0.26.5-34]
  • Fix a memory leak detected by Coverity Scan
  • Related: #1636103
    [0.26.5-33]
  • Only embed mime data for gray/rgb/cmyk colorspaces
  • if image decode map is identity
  • Resolves: #1636103
    [0.26.5-32]
  • Fix possible crash on broken files in ImageStream::getLine()
  • Resolves: #1685267
    [0.26.5-31]
  • Avoid global display profile state becoming an uncontrolled
  • memory leak
  • Resolves: #1648860
    [0.26.5-30]
  • Check for missing pages in documents passed to pdfunite
  • Resolves: #1677348
    [0.26.5-29]
  • Dont reuse ‘entry’ in Parser::makeStream
  • Resolves: #1677058
    [0.26.5-28]
  • Move the fileSpec.dictLookup call inside fileSpec.isDict if
  • Resolves: #1677029
    [0.26.5-27]
  • Defend against requests for negative XRef indices
  • Resolves: #1673700
    [0.26.5-26]
  • Add font substituteName() getter to Qt bindings
  • Resolves: bz#1639595
    [0.26.5-25]
  • Check for valid file name of embedded file
  • Resolves: #1651307
    [0.26.5-24]
  • Check for valid embedded file before trying to save it
  • Resolves: #1651306
    [0.26.5-23]
  • Check for stream before calling stream methods
  • when saving an embedded file
  • Resolves: #1651305
    [0.26.5-22]
  • Fix crash on missing embedded file
  • Resolves: #1651309
    [0.26.5-21]
  • Avoid cycles in PDF parsing
  • Resolves: #1640295

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.037 Low

EPSS

Percentile

90.8%