Mageia alert MGASA-2018-0465 (poppler)

From:
             
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
             
 
updates-announce@ml.mageia.org 
Subject:
             
 
[updates-announce] MGASA-2018-0465: Updated poppler packages fix security vulnerabilities 
Date:
             
 
Thu, 22 Nov 2018 23:27:25 +0100
Message-ID:
             
 
<20181122222725.700189F95A@duvel.mageia.org>
MGASA-2018-0465 - Updated poppler packages fix security vulnerabilities

Publication date: 22 Nov 2018
URL: https://advisories.mageia.org/MGASA-2018-0465.html
Type: security
Affected Mageia releases: 6
CVE: CVE-2018-16646,
     CVE-2018-19058,
     CVE-2018-19059,
     CVE-2018-19060

Description:
In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause
infinite recursion via a crafted file. A remote attacker can leverage
this for a DoS attack. (CVE-2018-16646)

An issue was discovered in Poppler 0.71.0. There is a reachable abort in
Object.h, will lead to denial of service because EmbFile::save2 in
FileSpec.cc lacks a stream check before saving an embedded file.
(CVE-2018-19058)

An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read
in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as
demonstrated by utils/pdfdetach.cc not validating embedded files before
save attempts. (CVE-2018-19059)

An issue was discovered in Poppler 0.71.0. There is a NULL pointer
dereference in goo/GooString.h, will lead to denial of service, as
demonstrated by utils/pdfdetach.cc not validating a filename of an
embedded file before constructing a save path. (CVE-2018-19060)

References:
- https://bugs.mageia.org/show_bug.cgi?id=23865
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...

SRPMS:
- 6/core/poppler-0.52.0-3.9.mga6