Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 11: 2009-10845 Moderate: Poppler Integer Overflow Fix

fedora
Calendar Grey October 27, 2009
Dist Fedora Esm H88
Fedora has rolled out a vital update to fix security vulnerabilities in poppler, notably addressing integer overflow issues to mitigate potential exploits and system risks
This build addresses several recent security issues.

Summary

Poppler, a PDF rendering library, is a fork of the xpdf PDF

viewer developed by Derek Noonburg of Glyph and Cog, LLC.

Update Information:

This build addresses several recent security issues.

Topics%20covered

Topics Covered

security advisory moderate security issue Fedora integer overflow poppler

Change Log

* Sun Oct 25 2009 Rex Dieter - 0.10.7-3 - CVE-2009-3603 xpdf/popppler: SplashBitmap::SplashBitmap integer overflow (#526915) - CVE-2009-3604 xpdf/poppler: Splash::drawImage integer overflow and missing allocation return value check(#526911) - CVE-2009-3606 xpdf/poppler: PSOutputDev::doImageL1Sep integer overflow (#526877) - CVE-2009-3607 poppler: create_surface_from_thumbnail_data integer overflow (#526924) - CVE-2009-3608 xpdf/poppler: integer overflow in ObjectStream::ObjectStream (#526637) - CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow (#526893) * Mon Jun 22 2009 Rex Dieter - 0.10.7-2 - reduce lib deps in qt/qt4 pkg-config support * Fri Jun 19 2009 Rex Dieter - 0.10.7-1 - Update to 0.10.7 - --enable-libjpeg --enable-libopenjpeg - (explicitly) --disable-zlib - %files: track sonames

References


[ 1 ] Bug #526915 - CVE-2009-3603 xpdf/poppler: SplashBitmap::SplashBitmap integer overflow https://bugzilla.redhat.com/show_bug.cgi?id=526915 [ 2 ] Bug #526911 - CVE-2009-3604 xpdf/poppler: Splash::drawImage integer overflow and missing allocation return value check https://bugzilla.redhat.com/show_bug.cgi?id=526911 [ 3 ] Bug #526877 - CVE-2009-3606 xpdf/poppler: PSOutputDev::doImageL1Sep integer overflow https://bugzilla.redhat.com/show_bug.cgi?id=526877 [ 4 ] Bug #526924 - CVE-2009-3607 poppler: create_surface_from_thumbnail_data integer overflow https://bugzilla.redhat.com/show_bug.cgi?id=526924 [ 5 ] Bug #526637 - CVE-2009-3608 xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016) https://bugzilla.redhat.com/show_bug.cgi?id=526637 [ 6 ] Bug #526893 - CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow https://bugzilla.redhat.com/show_bug.cgi?id=526893

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update poppler' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: poppler
Product: Fedora 11
Version: 0.10.7
Release: 3.fc11
URL: http://poppler.freedesktop.org/
Summary: PDF rendering library

Topics%20covered

Topics Covered

security advisory moderate security issue Fedora integer overflow poppler

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here