Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 433
Alerts This Week
Warning Icon 1 433

Ubuntu 18.04 LTS: USN-5606-2 Moderate: Poppler Regression Update

ubuntu
Calendar Grey September 14, 2022
Dist Ubuntu Esm H88
Ubuntu Security Notice USN-5607-3 signifies a vital fix in the libjpeg library. Prompt upgrades are highly recommended.
USN-5606-1 caused a regression in poppler.

Summary

USN-5606-1 caused a regression in poppler.

Software Description:

- poppler: PDF rendering library

Details:

USN-5606-1 fixed a vulnerability in poppler. Unfortunately it was missing a

commit to fix it properly. This update provides

the corresponding fix for Ubuntu 18.04 LTS and Ubuntu 16.04 ESM.

We apologize for the inconvenience.

Original advisory details:

It was discovered that poppler incorrectly handled certain

PDF. An attacker could possibly use this issue to cause a

denial of service or execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service software update code execution poppler Ubuntu 18.04

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  libpoppler-private-dev          0.62.0-2ubuntu2.14
  libpoppler73                    0.62.0-2ubuntu2.14
  poppler-utils                   0.62.0-2ubuntu2.14

Ubuntu 16.04 ESM:
  libpoppler-private-dev          0.41.0-0ubuntu1.16+esm2
  libpoppler58                    0.41.0-0ubuntu1.16+esm2
  poppler-utils                   0.41.0-0ubuntu1.16+esm2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5606-2

https://ubuntu.com/security/notices/USN-5606-1

https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/1989515

September 14, 2022

Topics%20covered

Topics Covered

security advisory denial of service software update code execution poppler Ubuntu 18.04

Package Information

https://launchpad.net/ubuntu/+source/poppler/0.62.0-2ubuntu2.14

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.