Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 569
Alerts This Week
Warning Icon 1 569

Ubuntu 18.04 LTS: USN-3886-1 Moderate: Poppler Denial Of Service

ubuntu
Calendar Grey February 11, 2019
Scroller Ubuntu
=========================================================================Ubuntu Security Notice USN-
Several security issues were fixed in poppler.

Summary

Several security issues were fixed in poppler.

Software Description:

- poppler: PDF rendering library

Details:

It was discovered that poppler incorrectly handled certain PDF files.

An attacker could possibly use this issue to cause a denial of service.

(CVE-2018-20551, CVE-2019-7310)

Topics%20covered

Topics Covered

security advisory DoS Ubuntu moderate severity poppler PDF library

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  libpoppler79                    0.68.0-0ubuntu1.5
  poppler-utils                   0.68.0-0ubuntu1.5

Ubuntu 18.04 LTS:
  libpoppler73                    0.62.0-2ubuntu2.7
  poppler-utils                   0.62.0-2ubuntu2.7

Ubuntu 16.04 LTS:
  libpoppler58                    0.41.0-0ubuntu1.12
  poppler-utils                   0.41.0-0ubuntu1.12

Ubuntu 14.04 LTS:
  libpoppler44                    0.24.5-2ubuntu4.16
  poppler-utils                   0.24.5-2ubuntu4.16

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3886-1

  CVE-2018-20551, CVE-2019-7310

Severity
important
Lowest
Low
Medium
High
Critical

February 11, 2019

Topics%20covered

Topics Covered

security advisory DoS Ubuntu moderate severity poppler PDF library

Package Information

  https://launchpad.net/ubuntu/+source/poppler/0.68.0-0ubuntu1.5
  https://launchpad.net/ubuntu/+source/poppler/0.62.0-2ubuntu2.7
  https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.12
  https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.16

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.