Описание
Security update for poppler
This update for poppler fixes the following issues:
- CVE-2025-3154: Fixed out-of-bounds array write due to invalid VerticesPerRow (bsc#1240687).
Список пакетов
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libpoppler-devel-0.43.0-16.67.1
libpoppler-glib-devel-0.43.0-16.67.1
libpoppler-glib8-0.43.0-16.67.1
libpoppler-qt4-4-0.43.0-16.67.1
libpoppler-qt4-devel-0.43.0-16.67.1
libpoppler60-0.43.0-16.67.1
poppler-tools-0.43.0-16.67.1
Ссылки
- Link for SUSE-SU-2025:3945-1
- E-Mail link for SUSE-SU-2025:3945-1
- SUSE Security Ratings
- SUSE Bug 1240687
- SUSE CVE CVE-2025-3154 page
Описание
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary.
Затронутые продукты
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpoppler-devel-0.43.0-16.67.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpoppler-glib-devel-0.43.0-16.67.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpoppler-glib8-0.43.0-16.67.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpoppler-qt4-4-0.43.0-16.67.1
Ссылки
- CVE-2025-3154
- SUSE Bug 1240687