Описание
Security update for poppler
This update for poppler fixes the following issues:
- CVE-2025-50420: Fixed Denial of Service in pdfseparate utility (bsc#1247590)
Список пакетов
SUSE Linux Enterprise Server 12 SP5-LTSS
libpoppler-devel-0.43.0-16.64.1
libpoppler-glib-devel-0.43.0-16.64.1
libpoppler-glib8-0.43.0-16.64.1
libpoppler-qt4-4-0.43.0-16.64.1
libpoppler-qt4-devel-0.43.0-16.64.1
libpoppler60-0.43.0-16.64.1
poppler-tools-0.43.0-16.64.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libpoppler-devel-0.43.0-16.64.1
libpoppler-glib-devel-0.43.0-16.64.1
libpoppler-glib8-0.43.0-16.64.1
libpoppler-qt4-4-0.43.0-16.64.1
libpoppler-qt4-devel-0.43.0-16.64.1
libpoppler60-0.43.0-16.64.1
poppler-tools-0.43.0-16.64.1
Ссылки
- Link for SUSE-SU-2025:02788-1
- E-Mail link for SUSE-SU-2025:02788-1
- SUSE Security Ratings
- SUSE Bug 1247590
- SUSE CVE CVE-2025-50420 page
Описание
An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:libpoppler-devel-0.43.0-16.64.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libpoppler-glib-devel-0.43.0-16.64.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libpoppler-glib8-0.43.0-16.64.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libpoppler-qt4-4-0.43.0-16.64.1
Ссылки
- CVE-2025-50420
- SUSE Bug 1247590