Описание
Security update for poppler
This update for poppler fixes the following issues:
- CVE-2024-6239: Fixed crash when using pdfinfo with -dests parameter on malformed input files (bsc#1226916).
Список пакетов
SUSE Linux Enterprise Module for Basesystem 15 SP5
libpoppler-cpp0-23.01.0-150500.3.11.1
libpoppler-devel-23.01.0-150500.3.11.1
libpoppler-glib-devel-23.01.0-150500.3.11.1
libpoppler-glib8-23.01.0-150500.3.11.1
libpoppler126-23.01.0-150500.3.11.1
poppler-tools-23.01.0-150500.3.11.1
typelib-1_0-Poppler-0_18-23.01.0-150500.3.11.1
SUSE Linux Enterprise Module for Package Hub 15 SP5
libpoppler-cpp0-23.01.0-150500.3.11.1
libpoppler-devel-23.01.0-150500.3.11.1
libpoppler-glib8-32bit-23.01.0-150500.3.11.1
libpoppler-qt5-1-23.01.0-150500.3.11.1
libpoppler-qt5-devel-23.01.0-150500.3.11.1
libpoppler126-32bit-23.01.0-150500.3.11.1
openSUSE Leap 15.5
libpoppler-cpp0-23.01.0-150500.3.11.1
libpoppler-cpp0-32bit-23.01.0-150500.3.11.1
libpoppler-devel-23.01.0-150500.3.11.1
libpoppler-glib-devel-23.01.0-150500.3.11.1
libpoppler-glib8-23.01.0-150500.3.11.1
libpoppler-glib8-32bit-23.01.0-150500.3.11.1
libpoppler-qt5-1-23.01.0-150500.3.11.1
libpoppler-qt5-1-32bit-23.01.0-150500.3.11.1
libpoppler-qt5-devel-23.01.0-150500.3.11.1
libpoppler-qt6-3-23.01.0-150500.3.11.1
libpoppler-qt6-devel-23.01.0-150500.3.11.1
libpoppler126-23.01.0-150500.3.11.1
libpoppler126-32bit-23.01.0-150500.3.11.1
poppler-tools-23.01.0-150500.3.11.1
typelib-1_0-Poppler-0_18-23.01.0-150500.3.11.1
Ссылки
- Link for SUSE-SU-2024:2332-1
- E-Mail link for SUSE-SU-2024:2332-1
- SUSE Security Ratings
- SUSE Bug 1226916
- SUSE CVE CVE-2024-6239 page
Описание
A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service.
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP5:libpoppler-cpp0-23.01.0-150500.3.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP5:libpoppler-devel-23.01.0-150500.3.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP5:libpoppler-glib-devel-23.01.0-150500.3.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP5:libpoppler-glib8-23.01.0-150500.3.11.1
Ссылки
- CVE-2024-6239
- SUSE Bug 1226916