Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02788-1

Опубликовано: 13 авг. 2025
Источник: suse-cvrf

Описание

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2025-50420: Fixed Denial of Service in pdfseparate utility (bsc#1247590)

Список пакетов

SUSE Linux Enterprise Server 12 SP5-LTSS
libpoppler-devel-0.43.0-16.64.1
libpoppler-glib-devel-0.43.0-16.64.1
libpoppler-glib8-0.43.0-16.64.1
libpoppler-qt4-4-0.43.0-16.64.1
libpoppler-qt4-devel-0.43.0-16.64.1
libpoppler60-0.43.0-16.64.1
poppler-tools-0.43.0-16.64.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libpoppler-devel-0.43.0-16.64.1
libpoppler-glib-devel-0.43.0-16.64.1
libpoppler-glib8-0.43.0-16.64.1
libpoppler-qt4-4-0.43.0-16.64.1
libpoppler-qt4-devel-0.43.0-16.64.1
libpoppler60-0.43.0-16.64.1
poppler-tools-0.43.0-16.64.1

Описание

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).


Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:libpoppler-devel-0.43.0-16.64.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libpoppler-glib-devel-0.43.0-16.64.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libpoppler-glib8-0.43.0-16.64.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libpoppler-qt4-4-0.43.0-16.64.1

Ссылки
Уязвимость SUSE-SU-2025:02788-1