vulnerability

Ubuntu: USN-5606-2: poppler regression

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Sep 14, 2022
Added
Sep 15, 2022
Modified
Feb 19, 2025

Description


USN-5606-1 fixed a vulnerability in poppler. Unfortunately it was missing a commit to fix it properly. This update provides the corresponding fix for Ubuntu 18.04 LTS and Ubuntu 16.04 ESM.


We apologize for the inconvenience.


Original advisory details:


It was discovered that poppler incorrectly handled certain PDF. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.

Solutions

ubuntu-upgrade-libpoppler-private-devubuntu-upgrade-libpoppler58ubuntu-upgrade-libpoppler73ubuntu-upgrade-poppler-utils
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.