Debian Security Advisory
DSA-4079-1 poppler -- security update
- Date Reported:
- 07 Jan 2018
- Affected Packages:
- Security database references:
- In Mitre's CVE dictionary: CVE-2017-9406, CVE-2017-9408, CVE-2017-9775, CVE-2017-9776, CVE-2017-9865, CVE-2017-14517, CVE-2017-14518, CVE-2017-14519, CVE-2017-14520, CVE-2017-14975, CVE-2017-14976, CVE-2017-14977, CVE-2017-15565.
- More information:
Multiple vulnerabilities were discovered in the poppler PDF rendering library, which could result in denial of service or the execution of arbitrary code if a malformed PDF file is processed.
For the oldstable distribution (jessie), these problems have been fixed in version 0.26.5-2+deb8u2.
For the stable distribution (stretch), these problems have been fixed in version 0.48.0-2+deb9u1.
We recommend that you upgrade your poppler packages.
For the detailed security status of poppler please refer to its security tracker page at: https://security-tracker.debian.org/tracker/poppler