Описание
Security update for poppler
This update for poppler fixes the following issues:
- CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).
Список пакетов
SUSE Linux Enterprise Module for Basesystem 15 SP4
libpoppler89-0.79.0-150200.3.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP5
libpoppler89-0.79.0-150200.3.11.1
SUSE Linux Enterprise Real Time 15 SP3
libpoppler-cpp0-0.79.0-150200.3.11.1
libpoppler-devel-0.79.0-150200.3.11.1
libpoppler-glib-devel-0.79.0-150200.3.11.1
libpoppler-glib8-0.79.0-150200.3.11.1
libpoppler89-0.79.0-150200.3.11.1
poppler-tools-0.79.0-150200.3.11.1
typelib-1_0-Poppler-0_18-0.79.0-150200.3.11.1
SUSE Manager Proxy 4.2
libpoppler-cpp0-0.79.0-150200.3.11.1
libpoppler-devel-0.79.0-150200.3.11.1
libpoppler-glib-devel-0.79.0-150200.3.11.1
libpoppler-glib8-0.79.0-150200.3.11.1
libpoppler89-0.79.0-150200.3.11.1
poppler-tools-0.79.0-150200.3.11.1
typelib-1_0-Poppler-0_18-0.79.0-150200.3.11.1
SUSE Manager Server 4.2
libpoppler-cpp0-0.79.0-150200.3.11.1
libpoppler-devel-0.79.0-150200.3.11.1
libpoppler-glib-devel-0.79.0-150200.3.11.1
libpoppler-glib8-0.79.0-150200.3.11.1
libpoppler89-0.79.0-150200.3.11.1
poppler-tools-0.79.0-150200.3.11.1
typelib-1_0-Poppler-0_18-0.79.0-150200.3.11.1
openSUSE Leap 15.4
libpoppler89-0.79.0-150200.3.11.1
libpoppler89-32bit-0.79.0-150200.3.11.1
Ссылки
- Link for SUSE-SU-2023:2941-1
- E-Mail link for SUSE-SU-2023:2941-1
- SUSE Security Ratings
- SUSE Bug 1199272
- SUSE CVE CVE-2022-27337 page
Описание
A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP4:libpoppler89-0.79.0-150200.3.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP5:libpoppler89-0.79.0-150200.3.11.1
SUSE Linux Enterprise Real Time 15 SP3:libpoppler-cpp0-0.79.0-150200.3.11.1
SUSE Linux Enterprise Real Time 15 SP3:libpoppler-devel-0.79.0-150200.3.11.1
Ссылки
- CVE-2022-27337
- SUSE Bug 1199272
- SUSE Bug 1225040