Bug 56746 - poppler: Multiple issues (5.0)
poppler: Multiple issues (5.0)
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Security updates
UCS 5.0
All Linux
: P3 normal (vote)
: UCS 5.0-5-errata
Assigned To: Quality Assurance
Philipp Hahn
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2023-10-17 17:36 CEST by Quality Assurance
Modified: 2023-10-18 16:20 CEST (History)
0 users

See Also:
What kind of report is it?: Security Issue
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Quality Assurance univentionstaff 2023-10-17 17:36:01 CEST
New Debian poppler 0.71.0-5+deb10u3 fixes:
This update addresses the following issues:
0.71.0-5+deb10u3 (Mon, 16 Oct 2023 02:02:58 +0300)
* Non-maintainer upload by the LTS Security Team.
* CVE-2020-23804: Stack overflow in XRef::readXRefTable()
* CVE-2022-37050: Crash in PDFDoc::savePageAs()
* CVE-2022-37051: Crash in the pdfunite tool
Comment 1 Quality Assurance univentionstaff 2023-10-17 18:00:41 CEST
--- mirror/ftp/pool/main/p/poppler/poppler_0.71.0-5+deb10u2.dsc
+++ apt/ucs_5.0-0-errata5.0-5/source/poppler_0.71.0-5+deb10u3.dsc
@@ -1,3 +1,10 @@
+0.71.0-5+deb10u3 [Mon, 16 Oct 2023 02:02:58 +0300] Adrian Bunk <bunk@debian.org>:
+
+  * Non-maintainer upload by the LTS Security Team.
+  * CVE-2020-23804: Stack overflow in XRef::readXRefTable()
+  * CVE-2022-37050: Crash in PDFDoc::savePageAs()
+  * CVE-2022-37051: Crash in the pdfunite tool
+
 0.71.0-5+deb10u2 [Mon, 14 Aug 2023 14:34:40 +0300] Adrian Bunk <bunk@debian.org>:
 
   * Non-maintainer upload by the LTS Security Team.

<http://piuparts.knut.univention.de/5.0-5/#2216773180099434768>
Comment 2 Philipp Hahn univentionstaff 2023-10-18 12:59:55 CEST
OK: bug
OK: yaml
OK: announce_errata
OK: patch
OK: piuparts

[5.0-5] 4a4fb1791f Bug #56746: poppler 0.71.0-5+deb10u3
 doc/errata/staging/poppler.yaml | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

[5.0-5] 29b1ef69cd Bug #56746: poppler 0.71.0-5+deb10u3
 doc/errata/staging/poppler.yaml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
Comment 3 Iván.Delgado univentionstaff 2023-10-18 16:20:38 CEST
<https://errata.software-univention.de/#/?erratum=5.0x845>