Описание
Security update for poppler
This update for poppler fixes the following issues:
Security issues fixed:
- CVE-2015-8868: Corrupted PDF file can corrupt heap, causing DoS (bsc#976844)
Список пакетов
SUSE Linux Enterprise Desktop 12
libpoppler-glib8-0.24.4-12.1
libpoppler-qt4-4-0.24.4-12.1
libpoppler44-0.24.4-12.1
poppler-tools-0.24.4-12.1
SUSE Linux Enterprise Desktop 12 SP1
libpoppler-glib8-0.24.4-12.1
libpoppler-qt4-4-0.24.4-12.1
libpoppler44-0.24.4-12.1
poppler-tools-0.24.4-12.1
SUSE Linux Enterprise Server 12
libpoppler-glib8-0.24.4-12.1
libpoppler-qt4-4-0.24.4-12.1
libpoppler44-0.24.4-12.1
poppler-tools-0.24.4-12.1
SUSE Linux Enterprise Server 12 SP1
libpoppler-glib8-0.24.4-12.1
libpoppler-qt4-4-0.24.4-12.1
libpoppler44-0.24.4-12.1
poppler-tools-0.24.4-12.1
SUSE Linux Enterprise Server for SAP Applications 12
libpoppler-glib8-0.24.4-12.1
libpoppler-qt4-4-0.24.4-12.1
libpoppler44-0.24.4-12.1
poppler-tools-0.24.4-12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libpoppler-glib8-0.24.4-12.1
libpoppler-qt4-4-0.24.4-12.1
libpoppler44-0.24.4-12.1
poppler-tools-0.24.4-12.1
SUSE Linux Enterprise Software Development Kit 12
libpoppler-devel-0.24.4-12.1
libpoppler-glib-devel-0.24.4-12.1
libpoppler-qt4-devel-0.24.4-12.1
typelib-1_0-Poppler-0_18-0.24.4-12.1
SUSE Linux Enterprise Software Development Kit 12 SP1
libpoppler-devel-0.24.4-12.1
libpoppler-glib-devel-0.24.4-12.1
libpoppler-qt4-devel-0.24.4-12.1
typelib-1_0-Poppler-0_18-0.24.4-12.1
Ссылки
- Link for SUSE-SU-2016:1543-1
- E-Mail link for SUSE-SU-2016:1543-1
- SUSE Security Ratings
- SUSE Bug 976844
- SUSE CVE CVE-2015-8868 page
Описание
Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libpoppler-glib8-0.24.4-12.1
SUSE Linux Enterprise Desktop 12 SP1:libpoppler-qt4-4-0.24.4-12.1
SUSE Linux Enterprise Desktop 12 SP1:libpoppler44-0.24.4-12.1
SUSE Linux Enterprise Desktop 12 SP1:poppler-tools-0.24.4-12.1
Ссылки
- CVE-2015-8868
- SUSE Bug 976844