Most recent entries from all

ALSA-2021:1881 — Moderate: poppler and evince security, bug fix, and enhancement update

Affected: AlmaLinux:8: evince-devel, AlmaLinux:8: poppler-cpp, AlmaLinux:8: poppler-cpp-devel, AlmaLinux:8: poppler-devel, AlmaLinux:8: poppler-glib-devel, AlmaLinux:8: poppler-qt5, AlmaLinux:8: poppler-qt5-devel

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files.

The following packages have been upgraded to a later upstream version: poppler (20.11.0). (BZ#1644423)

Security Fix(es):

* poppler: pdftohtml: access to uninitialized pointer could lead to DoS (CVE-2020-27778)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-06888

Withdrawn: BELL-CVE-2020-27778 — CVE-2020-27778 does not affect BellSoft software

Withdrawn by the publisher.

EUVD-2026-46686

fkie_cve-2020-27778

A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service.

GHSA-9f25-w4h3-5q5x

gsd-2020-27778

OESA-2021-1378 — poppler security update

Affected: openEuler:20.03-LTS-SP1: poppler, openEuler:20.03-LTS-SP2: poppler

Poppler is a free software utility library for rendering Portable Document Format (PDF) documents. \ Its development is supported by freedesktop.org. It is commonly used on Linux systems,and is used by \ the PDF viewers of the open source GNOME and KDE desktop environments. Security Fix(es): A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service.(CVE-2020-27778) In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.(CVE-2019-12293)

openSUSE-SU-2021:3854-1 — Security update for poppler

Security update for poppler

SUSE-SU-2021:3854-1 — Security update for poppler

Security update for poppler

UBUNTU-CVE-2020-27778

Affected: Ubuntu:16.04:LTS: poppler, Ubuntu:18.04:LTS: poppler