SUSE-SU-2023:3981-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2023:3981-1

Related

Published

2023-10-05T11:48:38Z

Modified

2023-10-05T11:48:38Z

Summary

Security update for poppler

Details

This update for poppler fixes the following issues:

CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422).
CVE-2020-36024: Fixed NULL Pointer Deference in FoFiType1C:convertToType1 (bsc#1214257).
CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622).
CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service (bsc#1214618).

References

Affected packages

Name: poppler
Purl: purl:rpm/suse/poppler&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.24.4-14.36.2

{
    "binaries": [
        {
            "libpoppler44": "0.24.4-14.36.2"
        }
    ]
}