poppler bug fix and enhancement update
Summary
ALBA-2021:3596: poppler bug fix and enhancement update. Affects poppler-cpp versions < 20.11.0-2.el8_4.1. Fixed in 20.11.0-2.el8_4.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Poppler is a Portable Document Format (PDF) rendering library used by applications such as Evince. It provides functionality for rendering PDF documents and extracting text, images, and metadata from them. The library is widely used in various software applications that handle PDF files.
Vulnerability Detail
This update addresses a bug in Poppler that caused certain PDF documents to be unable to open. The bug affected the poppler-cpp, poppler-cpp-devel, poppler-devel, poppler-glib-devel, poppler-qt5, and poppler-qt5-devel packages in AlmaLinux 8. The bug prevented the affected applications from properly rendering and displaying specific PDF documents, potentially leading to a loss of functionality or data for users.
How To Fix
Minimum fixed version
20.11.0-2.el8_4.1
This is the first release that contains the fix.
sudo dnf update poppler-cppTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
This update addresses a bug in Poppler that caused certain PDF documents to be unable to open. It is recommended to update the affected packages to version 20.11.0-2.el8_4.1 or later to fix the vulnerability. No specific workarounds have been mentioned. For more information, refer to the AlmaLinux OSV database advisory.
See every vulnerability recorded for poppler-cpp →
FAQ
The vulnerability affects the following packages in AlmaLinux 8: poppler-cpp, poppler-cpp-devel, poppler-devel, poppler-glib-devel, poppler-qt5, and poppler-qt5-devel.
The vulnerability prevents certain PDF documents from being opened and properly rendered by applications that use the affected Poppler library. This can result in a loss of functionality or data for users.
To fix this vulnerability, update the affected packages to version 20.11.0-2.el8_4.1 or later by running the package manager update command for the respective package(s).
No specific workarounds have been mentioned for this vulnerability. It is recommended to update the affected packages to the fixed versions.
You can find more information about this vulnerability in the AlmaLinux OSV database advisory: https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALBA-2021:3596.json
Related vulnerabilities
Recent vulnerabilities recorded for poppler-cpp.
