Debian Security Advisory

DSA-4097-1 poppler -- security update

Date Reported:
25 Jan 2018
Affected Packages:
poppler
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2017-14929, CVE-2017-1000456.
More information:

Multiple vulnerabilities were discovered in the poppler PDF rendering library, which could result in denial of service or the execution of arbitrary code if a malformed PDF file is processed.

This update also fixes a regression in the handling of Type 3 fonts.

For the oldstable distribution (jessie), these problems have been fixed in version 0.26.5-2+deb8u3.

For the stable distribution (stretch), these problems have been fixed in version 0.48.0-2+deb9u2.

We recommend that you upgrade your poppler packages.

For the detailed security status of poppler please refer to its security tracker page at: https://security-tracker.debian.org/tracker/poppler