MGASA-2018-0083

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2018-0083.html

Import Source

https://advisories.mageia.org/MGASA-2018-0083.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2018-0083

Related

CVE-2017-1000456

Published

2018-01-14T16:54:13Z

Modified

2018-01-14T16:27:44Z

Summary

Updated poppler packages fix security vulnerability

Details

freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations (CVE-2017-1000456).

References

https://advisories.mageia.org/MGASA-2018-0083.html
https://bugs.mageia.org/show_bug.cgi?id=22377
https://usn.ubuntu.com/usn/usn-3517-1/

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:5 / poppler

Package

Name: poppler
Purl: pkg:rpm/mageia/poppler?distro=mageia-5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.26.5-2.8.mga5

Ecosystem specific

{
    "section": "core"
}