[slackware-security] poppler

New poppler packages are available for Slackware 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/poppler-0.20.2-i486-2slack14.0.txz: Rebuilt. Sanitize error messages to remove escape sequences that could be used to exploit...

Slackware 14.0 / current : poppler (SSA:2013-233-03)

New poppler packages are available for Slackware 14.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-233-03. The text itself is copyright C...

Oracle Linux 6 : poppler (ELSA-2010-0859)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0859 advisory. - Add poppler-0.12.4-CVE-2010-3702.patch Properly initialize parser - Add poppler-0.12.4-CVE-2010-3703.patch Properly initialize stack - Add...

Oracle Linux 5 : poppler (ELSA-2009-1504)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1504 advisory. 0.5.4-4.4.el54.11 - Fixes various flaws addressed in bugs 526637, 526893 and 526915 which were tracked in 527403. - Resolves: 527403 0.5.4-4.4.el54.10 ...

Oracle Linux 5 : poppler (ELSA-2009-0480)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0480 advisory. - Removes CVE-2009-0146.CVE-2009-0147.CVE-2009-0166.allocation-size-check.patch. - Adds...

Oracle Linux 5 : Important: / poppler (ELSA-2007-1026)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-1026 advisory. 2.3.27-8.1 Fixes for: - 345101 - CVE-2007-4352 xpdf memory corruption in DCTStream::readProgressiveDataUnit - 345111 - CVE-2007-5392 xpdf buffer overfl...

Oracle Linux 5 : poppler (ELSA-2010-0749)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0749 advisory. - Add poppler-0.5.4-CVE-2010-3702.patch Properly initialize parser - Add poppler-0.5.4-CVE-2010-3704.patch Fix crash in broken pdf code 0 Tenable has...

Oracle Linux 5 : poppler (ELSA-2008-0239)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0239 advisory. 0.5.4-4.4 - Add CVE-2008-1693.patch 442392. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 5 : Important: / poppler (ELSA-2007-0732)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0732 advisory. 0.5.4-4.1 - Add patch to fix CVE-2007-3387 248212. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

[SECURITY] [DSA 2719-1] poppler security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2719-1 [email protected] http://www.debian.org/security/ Michael Gilbert July 10, 2013 http://www.debian.org/security/faq -...

Debian DSA-2719-1 : poppler - several vulnerabilities

Multiple vulnerabilities were discovered in the poppler PDF rendering library. - CVE-2013-1788 Multiple invalid memory access issues, which could potentially lead to arbitrary code execution if the user were tricked into opening a malformed PDF document. - CVE-2013-1790 An uninitialized memory...

Debian Security Advisory DSA 2719-1 (poppler - several vulnerabilities)

Multiple vulnerabilities were discovered in the poppler PDF rendering library. CVE-2013-1788 Multiple invalid memory access issues, which could potentially lead to arbitrary code execution if the user were tricked into opening a malformed PDF document. CVE-2013-1790 An uninitialized memory issue,...

DSA-2719-1 poppler - multiple issues

Bulletin has no description...

Debian: Security Advisory (DSA-2719-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : poppler (MDVSA-2013:143)

Multiple vulnerabilities has been found and corrected in poppler : poppler before 0.22.1 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors that trigger an invalid memory access in 1 splash/Splash.cc, 2 poppler/Function.cc, and 3...

CVE-2013-1789

splash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to the 1 Splash::arbitraryTransformMask, 2 Splash::blitMask, and 3 Splash::scaleMaskYuXu functions...

CVE-2013-1790

poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...

CVE-2013-1788

poppler before 0.22.1 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in 1 splash/Splash.cc, 2 poppler/Function.cc, and 3 poppler/Stream.cc...

DEBIAN-CVE-2013-1788

poppler before 0.22.1 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in 1 splash/Splash.cc, 2 poppler/Function.cc, and 3 poppler/Stream.cc...

CVE-2013-1790

poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...