File _patchinfo of Package patchinfo.5223
<patchinfo incident="5223">
<issue id="1045719" tracker="bnc">VUL-0: CVE-2017-9775: poppler: DoS stack buffer overflow in GfxState.cc in pdftocairo via a crafted PDF document</issue>
<issue id="1042802" tracker="bnc">VUL-0: CVE-2017-9408: poppler: Memory leak in the Object::initArray function</issue>
<issue id="1045721" tracker="bnc">VUL-0: CVE-2017-9776: poppler: DoS integer overflow leading to heap buffer overflow in JBIG2Stream.cc via a crafted PDF document</issue>
<issue id="2017-9408" tracker="cve" />
<issue id="2017-9776" tracker="cve" />
<issue id="2017-9775" tracker="cve" />
<category>security</category>
<rating>moderate</rating>
<packager>psimons</packager>
<description>This update for poppler fixes the following issues:
Security issues fixed:
- CVE-2017-9775: Fix a stack overflow bug in pdftocairo that could have been exploited in a denial
of service attack through a specially crafted PDF document. (bsc#1045719)
- CVE-2017-9776: Fix an integer overflow bug that could have been exploited in a denial of service
attack through a specially crafted PDF document. (bsc#1045721)
- CVE-2017-9408: Fix a memory leak that occurred when the parser tried to recover from a broken
input file. (bsc#1042802)
</description>
<summary>Security update for poppler</summary>
</patchinfo>