MGASA-2018-0465 - Updated poppler packages fix security vulnerabilities

Publication date: 22 Nov 2018
URL: https://advisories.mageia.org/MGASA-2018-0465.html
Type: security
Affected Mageia releases: 6
CVE: CVE-2018-16646,
     CVE-2018-19058,
     CVE-2018-19059,
     CVE-2018-19060

In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause
infinite recursion via a crafted file. A remote attacker can leverage
this for a DoS attack. (CVE-2018-16646)

An issue was discovered in Poppler 0.71.0. There is a reachable abort in
Object.h, will lead to denial of service because EmbFile::save2 in
FileSpec.cc lacks a stream check before saving an embedded file.
(CVE-2018-19058)

An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read
in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as
demonstrated by utils/pdfdetach.cc not validating embedded files before
save attempts. (CVE-2018-19059)

An issue was discovered in Poppler 0.71.0. There is a NULL pointer
dereference in goo/GooString.h, will lead to denial of service, as
demonstrated by utils/pdfdetach.cc not validating a filename of an
embedded file before constructing a save path. (CVE-2018-19060)

References:
- https://bugs.mageia.org/show_bug.cgi?id=23865
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16646
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19058
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19059
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19060

SRPMS:
- 6/core/poppler-0.52.0-3.9.mga6