Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Mageia 8 Security Update: MGASA-2023-0262 Addresses Poppler DoS Risk

mageia
Calendar Grey September 11, 2023
Dist Mageia Esm H88
Revamped poppler components address a significant denial of service flaw in Mageia. Important security alert issued in September 2023.
An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function

Summary

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function. (CVE-2020-36023)
An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function. (CVE-2020-36024)

References

- https://bugs.mageia.org/show_bug.cgi?id=32242

- https://ubuntu.com/security/notices/USN-6299-1

- https://www.cve.org/CVERecord?id=CVE-2020-36023

- https://www.cve.org/CVERecord?id=CVE-2020-36024

Topics%20covered

Topics Covered

security advisory moderate update DoS software fix poppler Mageia

Resolution

SRPMS

- 8/core/poppler-20.12.1-1.4.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 11 Sep 2023
URL: https://advisories.mageia.org/MGASA-2023-0262.html
Type: security
CVE: CVE-2020-36023, CVE-2020-36024

Topics%20covered

Topics Covered

security advisory moderate update DoS software fix poppler Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here