File _patchinfo of Package patchinfo.31252

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.31252

<patchinfo incident="31252">
  <issue tracker="cve" id="2022-37052"/>
  <issue tracker="cve" id="2019-9545"/>
  <issue tracker="cve" id="2020-36023"/>
  <issue tracker="bnc" id="1128114">VUL-1: CVE-2019-9545: poppler: denial of service via recursive function call, in JBIG2Stream:readTextRegion() located in JBIG2Stream.cc</issue>
  <issue tracker="bnc" id="1214726">VUL-0: CVE-2022-37052: poppler: reachable assertion due to a failure in markObject()</issue>
  <issue tracker="bnc" id="1214256">VUL-0: CVE-2020-36023: poppler: Stack-Overflow in `FoFiType1C:cvtGlyph`</issue>
  <packager>pgajdos</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for poppler</summary>
  <description>This update for poppler fixes the following issues:

- CVE-2019-9545: Fixed an uncontrolled recursion issue that could
  cause a crash (bsc#1128114).
- CVE-2022-37052: Fixed a crash that could be triggered when opening
  a crafted file (bsc#1214726).
- CVE-2020-36023: Fixed a stack bugger overflow in FoFiType1C:cvtGlyph (bsc#1214256).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.31252

Places