Debian Security Advisory

DLA-3120-1 poppler -- LTS security update

Date Reported:

26 Sep 2022

Affected Packages:

Vulnerable:

Yes

Security database references:

In the Debian bugtracking system: Bug 913164, Bug 913177, Bug 917974, Bug 925264, Bug 941776, Bug 933812, Bug 1010695, Bug 1018971.
In Mitre's CVE dictionary: CVE-2018-18897, CVE-2018-19058, CVE-2018-20650, CVE-2019-9903, CVE-2019-9959, CVE-2019-14494, CVE-2020-27778, CVE-2022-27337, CVE-2022-38784.

More information:

Several security vulnerabilities have been discovered in Poppler, a PDF rendering library, that could lead to denial of service or possibly other unspecified impact when processing maliciously crafted documents.

For Debian 10 buster, these problems have been fixed in version 0.71.0-5+deb10u1.

We recommend that you upgrade your poppler packages.

For the detailed security status of poppler please refer to its security tracker page at: https://security-tracker.debian.org/tracker/poppler

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS