Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:1543-1

Опубликовано: 10 июн. 2016
Источник: suse-cvrf

Описание

Security update for poppler

This update for poppler fixes the following issues:

Security issues fixed:

  • CVE-2015-8868: Corrupted PDF file can corrupt heap, causing DoS (bsc#976844)

Список пакетов

SUSE Linux Enterprise Desktop 12
libpoppler-glib8-0.24.4-12.1
libpoppler-qt4-4-0.24.4-12.1
libpoppler44-0.24.4-12.1
poppler-tools-0.24.4-12.1
SUSE Linux Enterprise Desktop 12 SP1
libpoppler-glib8-0.24.4-12.1
libpoppler-qt4-4-0.24.4-12.1
libpoppler44-0.24.4-12.1
poppler-tools-0.24.4-12.1
SUSE Linux Enterprise Server 12
libpoppler-glib8-0.24.4-12.1
libpoppler-qt4-4-0.24.4-12.1
libpoppler44-0.24.4-12.1
poppler-tools-0.24.4-12.1
SUSE Linux Enterprise Server 12 SP1
libpoppler-glib8-0.24.4-12.1
libpoppler-qt4-4-0.24.4-12.1
libpoppler44-0.24.4-12.1
poppler-tools-0.24.4-12.1
SUSE Linux Enterprise Server for SAP Applications 12
libpoppler-glib8-0.24.4-12.1
libpoppler-qt4-4-0.24.4-12.1
libpoppler44-0.24.4-12.1
poppler-tools-0.24.4-12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libpoppler-glib8-0.24.4-12.1
libpoppler-qt4-4-0.24.4-12.1
libpoppler44-0.24.4-12.1
poppler-tools-0.24.4-12.1
SUSE Linux Enterprise Software Development Kit 12
libpoppler-devel-0.24.4-12.1
libpoppler-glib-devel-0.24.4-12.1
libpoppler-qt4-devel-0.24.4-12.1
typelib-1_0-Poppler-0_18-0.24.4-12.1
SUSE Linux Enterprise Software Development Kit 12 SP1
libpoppler-devel-0.24.4-12.1
libpoppler-glib-devel-0.24.4-12.1
libpoppler-qt4-devel-0.24.4-12.1
typelib-1_0-Poppler-0_18-0.24.4-12.1

Описание

Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.


Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libpoppler-glib8-0.24.4-12.1
SUSE Linux Enterprise Desktop 12 SP1:libpoppler-qt4-4-0.24.4-12.1
SUSE Linux Enterprise Desktop 12 SP1:libpoppler44-0.24.4-12.1
SUSE Linux Enterprise Desktop 12 SP1:poppler-tools-0.24.4-12.1

Ссылки