Debian Security Advisory
DSA-4097-1 poppler -- security update
- Date Reported:
- 25 Jan 2018
- Affected Packages:
- poppler
- Vulnerable:
- Yes
- Security database references:
- In Mitre's CVE dictionary: CVE-2017-14929, CVE-2017-1000456.
- More information:
-
Multiple vulnerabilities were discovered in the poppler PDF rendering library, which could result in denial of service or the execution of arbitrary code if a malformed PDF file is processed.
This update also fixes a regression in the handling of Type 3 fonts.
For the oldstable distribution (jessie), these problems have been fixed in version 0.26.5-2+deb8u3.
For the stable distribution (stretch), these problems have been fixed in version 0.48.0-2+deb9u2.
We recommend that you upgrade your poppler packages.
For the detailed security status of poppler please refer to its security tracker page at: https://security-tracker.debian.org/tracker/poppler