Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

openSUSE 15.5: SUSE-SU-2023:4291-1 Moderate: Poppler DoS Fix

opensuse
Calendar Grey October 31, 2023
Dist Opensuse Esm H88
A vulnerability identified in the Poppler library can cause remote denial-of-service, affecting service availability and system performance, so upgrade now
This update for poppler fixes the following issues: CVE-2023-34872: Fixed a remote denial-of-service in Outline.cc

Description

This update for poppler fixes the following issues:

* CVE-2023-34872: Fixed a remote denial-of-service in Outline.cc.

(bsc#1213888)

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Package Hub 15 15-SP5

zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4291=1

* openSUSE Leap 15.5

zypper in -t patch SUSE-2023-4291=1 openSUSE-SLE-15.5-2023-4291=1

* Basesystem Module 15-SP5

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4291=1

Package List

* SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64)

* poppler-debugsource-23.01.0-150500.3.5.2

* libpoppler-cpp0-23.01.0-150500.3.5.2

* poppler-qt5-debugsource-23.01.0-150500.3.5.1

* libpoppler-qt5-1-debuginfo-23.01.0-150500.3.5.1

* libpoppler-qt5-devel-23.01.0-150500.3.5.1

* libpoppler-qt5-1-23.01.0-150500.3.5.1

* libpoppler-devel-23.01.0-150500.3.5.2

* libpoppler-cpp0-debuginfo-23.01.0-150500.3.5.2

* SUSE Package Hub 15 15-SP5 (x86_64)

* libpoppler-glib8-32bit-debuginfo-23.01.0-150500.3.5.2

* libpoppler126-32bit-23.01.0-150500.3.5.2

* libpoppler126-32bit-debuginfo-23.01.0-150500.3.5.2

* libpoppler-glib8-32bit-23.01.0-150500.3.5.2

* openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586)

* libpoppler-glib-devel-23.01.0-150500.3.5.2

* poppler-tools-debuginfo-23.01.0-150500.3.5.2

* libpoppler-glib8-23.01.0-150500.3.5.2

* libpoppler126-debuginfo-23.01.0-150500.3.5.2

* poppler-tools-23.01.0-150500.3.5.2

* libpoppler-qt6-3-23.01.0-150500.3.5.1

* poppler-debugsource-23.01.0-150500.3.5.2

*...

Read the Full Advisory

References

* bsc#1213888

## References:

* https://www.suse.com/security/cve/CVE-2023-34872.html

* https://bugzilla.suse.com/show_bug.cgi?id=1213888

Announcement ID: SUSE-SU-2023:4291-1
Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here