Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 9: 2009-6982 Critical: Poppler Jbig2 Security Flaws

fedora
Calendar Grey June 26, 2009
Dist Fedora Esm H88
A new enhancement for Fedora 9's poppler library addresses jbig2 vulnerabilities and strengthens overall security.
An update to address jbig2-related security issues.

Summary

Poppler, a PDF rendering library, is a fork of the xpdf PDF

viewer developed by Derek Noonburg of Glyph and Cog, LLC.

Update Information:

An update to address jbig2-related security issues.

Change Log

* Fri Jan 23 2009 Rex Dieter - 0.8.7-2 - use backported jbig2_security patch from debian/ubuntu (#496943) - poppler-data-0.2.1 - --enable-libjpeg (speed) - track sonames - patch to workaround okular rendering hyperlinks (#480357) * Wed Oct 8 2008 Rex Dieter - 0.8.7-1 - 0.8.7, fixes "Saving a PDF ... results in mangled file" (#462481) - spec cosmetics from devel/ branch * Thu Jul 31 2008 Tomas Hoger - 0.8.1-2 - Security update: Add upstream patch for CVE-2008-2950 / oCERT-2008-007 - use of an uninitilized pointer to call free() in Page::~Page (#454277) - Bug fixes: Fix crash when reading QuadPoints (#448516) Use static FT_Library in CairoOutputDev, as dynamic may trigger use-after-free and crash e.g. evince (#456867) * Mon Apr 28 2008 Matthias Clasen - 0.8.1-1 - Update to 0.8.1

References


[ 1 ] Bug #496943 - CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-1187 CVE-2009-1188 poppler various flaws [F9] https://bugzilla.redhat.com/show_bug.cgi?id=496943

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update poppler' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: poppler
Product: Fedora 9
Version: 0.8.7
Release: 2.fc9
Summary: PDF rendering library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here