DSA-4079-1 poppler -- security update

Debian Security Advisory

DSA-4079-1 poppler -- security update

Date Reported:

07 Jan 2018

Affected Packages:

poppler

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2017-9406, CVE-2017-9408, CVE-2017-9775, CVE-2017-9776, CVE-2017-9865, CVE-2017-14517, CVE-2017-14518, CVE-2017-14519, CVE-2017-14520, CVE-2017-14975, CVE-2017-14976, CVE-2017-14977, CVE-2017-15565.

More information:

Multiple vulnerabilities were discovered in the poppler PDF rendering library, which could result in denial of service or the execution of arbitrary code if a malformed PDF file is processed.

For the oldstable distribution (jessie), these problems have been fixed in version 0.26.5-2+deb8u2.

For the stable distribution (stretch), these problems have been fixed in version 0.48.0-2+deb9u1.

We recommend that you upgrade your poppler packages.

For the detailed security status of poppler please refer to its security tracker page at: https://security-tracker.debian.org/tracker/poppler