Most recent entries from all

ALSA-2023:2259 — Moderate: poppler security and bug fix update

Affected: AlmaLinux:9: poppler, AlmaLinux:9: poppler-cpp, AlmaLinux:9: poppler-cpp-devel, AlmaLinux:9: poppler-devel, AlmaLinux:9: poppler-glib, AlmaLinux:9: poppler-glib-devel, AlmaLinux:9: poppler-qt5, AlmaLinux:9: poppler-qt5-devel, AlmaLinux:9: poppler-utils

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-05993

Withdrawn: BELL-CVE-2022-38784 — CVE-2022-38784 does not affect BellSoft software

Withdrawn by the publisher.

EUVD-2026-184773

fkie_cve-2022-38784

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.

GHSA-5557-33mq-5995

gsd-2022-38784

OESA-2022-1906 — poppler security update

Affected: openEuler:20.03-LTS-SP1: poppler, openEuler:20.03-LTS-SP3: poppler, openEuler:22.03-LTS: poppler

Poppler is a free software utility library for rendering Portable Document Format (PDF) documents. \Its development is supported by freedesktop.org. It is commonly used on Linux systems,and is used by \the PDF viewers of the open source GNOME and KDE desktop environments. Security Fix(es): Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.(CVE-2022-38784)

openSUSE-SU-2024:12362-1 — libpoppler-cpp0-22.09.0-1.1 on GA media

libpoppler-cpp0-22.09.0-1.1 on GA media

RHBA-2024:8405 — Red Hat Bug Fix Advisory: Updated rhel8/gimp-flatpak container image

poppler: integer overflow in JBIG2 decoder using malformed files

SUSE-SU-2023:0480-1 — Security update for poppler

Security update for poppler

UBUNTU-CVE-2022-38784

Affected: Ubuntu:Pro:16.04:LTS: poppler, Ubuntu:16.04:LTS: emscripten, Ubuntu:18.04:LTS: poppler, Ubuntu:18.04:LTS: emscripten, Ubuntu:20.04:LTS: poppler, Ubuntu:22.04:LTS: emscripten, Ubuntu:22.04:LTS: poppler, Ubuntu:24.04:LTS: emscripten, Ubuntu:25.10: emscripten, Ubuntu:26.04:LTS: emscripten

WID-SEC-W-2022-1214 — poppler: Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in poppler ausnutzen, um beliebigen Programmcode auszuführen und einen Denial of Service Zustand zu verursachen.