Описание
Security update for poppler
This update for poppler fixes the following issues:
- CVE-2025-52886: Fixed an integer overflow that can lead to a use-after-free. (bsc#1245625)
Список пакетов
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
libpoppler-cpp0-23.01.0-150500.3.20.1
libpoppler-devel-23.01.0-150500.3.20.1
libpoppler-glib-devel-23.01.0-150500.3.20.1
libpoppler-glib8-23.01.0-150500.3.20.1
libpoppler126-23.01.0-150500.3.20.1
poppler-tools-23.01.0-150500.3.20.1
typelib-1_0-Poppler-0_18-23.01.0-150500.3.20.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
libpoppler-cpp0-23.01.0-150500.3.20.1
libpoppler-devel-23.01.0-150500.3.20.1
libpoppler-glib-devel-23.01.0-150500.3.20.1
libpoppler-glib8-23.01.0-150500.3.20.1
libpoppler126-23.01.0-150500.3.20.1
poppler-tools-23.01.0-150500.3.20.1
typelib-1_0-Poppler-0_18-23.01.0-150500.3.20.1
SUSE Linux Enterprise Server 15 SP5-LTSS
libpoppler-cpp0-23.01.0-150500.3.20.1
libpoppler-devel-23.01.0-150500.3.20.1
libpoppler-glib-devel-23.01.0-150500.3.20.1
libpoppler-glib8-23.01.0-150500.3.20.1
libpoppler126-23.01.0-150500.3.20.1
poppler-tools-23.01.0-150500.3.20.1
typelib-1_0-Poppler-0_18-23.01.0-150500.3.20.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
libpoppler-cpp0-23.01.0-150500.3.20.1
libpoppler-devel-23.01.0-150500.3.20.1
libpoppler-glib-devel-23.01.0-150500.3.20.1
libpoppler-glib8-23.01.0-150500.3.20.1
libpoppler126-23.01.0-150500.3.20.1
poppler-tools-23.01.0-150500.3.20.1
typelib-1_0-Poppler-0_18-23.01.0-150500.3.20.1
Ссылки
- Link for SUSE-SU-2025:02318-1
- E-Mail link for SUSE-SU-2025:02318-1
- SUSE Security Ratings
- SUSE Bug 1245625
- SUSE CVE CVE-2025-52886 page
Описание
Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.
Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libpoppler-cpp0-23.01.0-150500.3.20.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libpoppler-devel-23.01.0-150500.3.20.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libpoppler-glib-devel-23.01.0-150500.3.20.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libpoppler-glib8-23.01.0-150500.3.20.1
Ссылки
- CVE-2025-52886
- SUSE Bug 1245625