MGASA-2018-0068

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2018-0068.html

Import Source

https://advisories.mageia.org/MGASA-2018-0068.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2018-0068

Related

CVE-2017-1000456

Published

2018-01-11T19:36:44Z

Modified

2018-01-11T19:27:19Z

Summary

Updated poppler packages fix security vulnerability

Details

freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations. (CVE-2017-1000456

References

https://advisories.mageia.org/MGASA-2018-0068.html
https://bugs.mageia.org/show_bug.cgi?id=22352
https://usn.ubuntu.com/usn/usn-3517-1/

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:6 / poppler

Package

Name: poppler
Purl: pkg:rpm/mageia/poppler?distro=mageia-6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.52.0-3.6.mga6

Ecosystem specific

{
    "section": "core"
}