Affected: AlmaLinux:8: evince-devel, AlmaLinux:8: poppler-cpp, AlmaLinux:8: poppler-cpp-devel, AlmaLinux:8: poppler-devel, AlmaLinux:8: poppler-glib-devel, AlmaLinux:8: poppler-qt5, AlmaLinux:8: poppler-qt5-devel

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files.

The following packages have been upgraded to a later upstream version: poppler (20.11.0). (BZ#1644423)

Security Fix(es):

* poppler: pdftohtml: access to uninitialized pointer could lead to DoS (CVE-2020-27778)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Withdrawn by the publisher.

A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service.

A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service.

Affected: openEuler:20.03-LTS-SP1: poppler, openEuler:20.03-LTS-SP2: poppler

Poppler is a free software utility library for rendering Portable Document Format (PDF) documents. \ Its development is supported by freedesktop.org. It is commonly used on Linux systems,and is used by \ the PDF viewers of the open source GNOME and KDE desktop environments. Security Fix(es): A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service.(CVE-2020-27778) In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.(CVE-2019-12293)

Security update for poppler

Security update for poppler

Affected: Ubuntu:16.04:LTS: poppler, Ubuntu:18.04:LTS: poppler

A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service.