Lucene search

K
oraclelinuxOracleLinuxELSA-2019-2713
HistorySep 12, 2019 - 12:00 a.m.

poppler security update

2019-09-1200:00:00
linux.oracle.com
66

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

[0.66.0-11.el8_0.12]

  • Ignore dict Length if it is broken
  • Resolves: #1741146
    [0.66.0-11.el8_0.11]
  • Check whether input is RGB in PSOutputDev::checkPageSlice()
  • (also when using ‘-optimizecolorspace’ flag)
  • Resolves: #1741145
    [0.66.0-11.el8_0.10]
  • Fail gracefully if not all components of JPEG2000Stream
  • have the same size
  • Resolves: #1740612
    [0.66.0-11.el8_0.9]
  • Fix stack overflow on broken file
  • Resolves: #1717867
    [0.66.0-11.el8_0.8]
  • Constrain number of cycles in rescale filter
  • Compute correct coverage values for box filter
  • Resolves: #1717866
    [0.66.0-11.el8_0.7]
  • Fix possible crash on broken files in ImageStream::getLine()
  • Resolves: #1717803
    [0.66.0-11.el8_0.6]
  • Move the fileSpec.dictLookup call inside fileSpec.isDict if
  • Resolves: #1717788
    [0.66.0-11.el8_0.5]
  • Defend against requests for negative XRef indices
  • Resolves: #1717779
    [0.66.0-11.el8_0.4]
  • Do not try to parse into unallocated XRef entry
  • Resolves: #1717790
    [0.66.0-11.el8_0.3]
  • Avoid global display profile state becoming an uncontrolled
  • memory leak
  • Resolves: #1717776
    [0.66.0-11.el8_0.2]
  • Check Catalog from XRef for being a Dict
  • Resolves: #1690480
    [0.66.0-11.el8_0.1]
  • Do not try to construct invalid rich media annotation assets
  • Resolves: #1690478
    [0.66.0-11]
  • Fix tiling patterns when pattern cell is too far
  • Resolves: #1644094

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P