SUSE-SU-2023:3998-1: Security update for poppler

Q: Which installed components are covered by this update?

The update covers libpoppler89, libpoppler-cpp0, libpoppler-devel, typelib, poppler-debugsource, poppler-tools-debuginfo, and the listed debuginfo packages.

Q: What impact do the addressed issues have?

The issues include uncontrolled recursion, a NULL pointer dereference, an abort, and a reachable assertion. Several are described as denial-of-service conditions affecting Poppler utilities or PDF processing paths.

Q: Which Poppler tools or code paths are specifically mentioned?

The advisory identifies pdfinfo and pdftops for uncontrolled recursion, savePageAs in PDFDoc.c for denial of service, pdfunite.cc for an abort, and FoFiType1C::convertToType1 for a NULL pointer dereference.

Published Oct 6, 2023

Updated

This update for poppler fixes the following issues: CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422). CVE-2020-36024: Fixed NULL Pointer Deference in FoFiType1C:convertToType1 (bsc#1214257). CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622). CVE-2022-37051: Fixed abort in main() in pdfunite.cc (bsc#1214621). CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service (bsc#1214618).

Affected Software

157 affected componentsFixes available

All of the following

SUSE SUSE Manager Server 4.2 (ppc64le s390x x86_64)

Any of the following

suse/typelib<1_0-Poppler-0_18-0.79.0-150200.3.21.2

1_0-Poppler-0_18-0.79.0-150200.3.21.2

suse/poppler-debugsource<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

All of the following

SUSE SUSE Enterprise Storage 7.1 (aarch64 x86_64)

Any of the following

suse/typelib<1_0-Poppler-0_18-0.79.0-150200.3.21.2

1_0-Poppler-0_18-0.79.0-150200.3.21.2

suse/poppler-debugsource<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

All of the following

SUSE openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libpoppler89-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

All of the following

SUSE openSUSE Leap 15.4 (x86_64)

Any of the following

suse/libpoppler89<32bit-debuginfo-0.79.0-150200.3.21.2

32bit-debuginfo-0.79.0-150200.3.21.2

suse/libpoppler89<32bit-0.79.0-150200.3.21.2

32bit-0.79.0-150200.3.21.2

All of the following

SUSE Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libpoppler89-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-debugsource<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

All of the following

SUSE Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libpoppler89-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-debugsource<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

All of the following

SUSE SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64)

Any of the following

suse/typelib<1_0-Poppler-0_18-0.79.0-150200.3.21.2

1_0-Poppler-0_18-0.79.0-150200.3.21.2

suse/poppler-debugsource<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

All of the following

SUSE SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64)

Any of the following

suse/typelib<1_0-Poppler-0_18-0.79.0-150200.3.21.2

1_0-Poppler-0_18-0.79.0-150200.3.21.2

suse/poppler-debugsource<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

All of the following

SUSE SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64)

Any of the following

suse/typelib<1_0-Poppler-0_18-0.79.0-150200.3.21.2

1_0-Poppler-0_18-0.79.0-150200.3.21.2

suse/poppler-debugsource<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

All of the following

SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/typelib<1_0-Poppler-0_18-0.79.0-150200.3.21.2

1_0-Poppler-0_18-0.79.0-150200.3.21.2

suse/poppler-debugsource<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

All of the following

SUSE SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/typelib<1_0-Poppler-0_18-0.79.0-150200.3.21.2

1_0-Poppler-0_18-0.79.0-150200.3.21.2

suse/poppler-debugsource<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64)

Any of the following

suse/typelib<1_0-Poppler-0_18-0.79.0-150200.3.21.2

1_0-Poppler-0_18-0.79.0-150200.3.21.2

suse/poppler-debugsource<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64)

Any of the following

suse/typelib<1_0-Poppler-0_18-0.79.0-150200.3.21.2

1_0-Poppler-0_18-0.79.0-150200.3.21.2

suse/poppler-debugsource<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

All of the following

SUSE SUSE Manager Proxy 4.2 (x86_64)

Any of the following

suse/typelib<1_0-Poppler-0_18-0.79.0-150200.3.21.2

1_0-Poppler-0_18-0.79.0-150200.3.21.2

suse/poppler-debugsource<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

All of the following

SUSE SUSE Manager Retail Branch Server 4.2 (x86_64)

Any of the following

suse/typelib<1_0-Poppler-0_18-0.79.0-150200.3.21.2

1_0-Poppler-0_18-0.79.0-150200.3.21.2

suse/poppler-debugsource<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-cpp0-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/poppler-tools<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib8-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler-glib-devel<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

suse/libpoppler89-debuginfo<0.79.0-150200.3.21.2

0.79.0-150200.3.21.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/typelib to a version that resolves this vulnerability.
Fixed in 1_0-Poppler-0_18-0.79.0-150200.3.21.2
Upgrade
Upgrade suse/poppler-debugsource to a version that resolves this vulnerability.
Fixed in 0.79.0-150200.3.21.2
Upgrade
Upgrade suse/libpoppler89 to a version that resolves this vulnerability.
Fixed in 0.79.0-150200.3.21.2
Upgrade
Upgrade suse/poppler-tools-debuginfo to a version that resolves this vulnerability.
Fixed in 0.79.0-150200.3.21.2
Upgrade
Upgrade suse/libpoppler-cpp0 to a version that resolves this vulnerability.
Fixed in 0.79.0-150200.3.21.2
Upgrade
Upgrade suse/libpoppler-cpp0-debuginfo to a version that resolves this vulnerability.
Fixed in 0.79.0-150200.3.21.2
Upgrade
Upgrade suse/libpoppler-devel to a version that resolves this vulnerability.
Fixed in 0.79.0-150200.3.21.2
Upgrade
Upgrade suse/libpoppler-glib8 to a version that resolves this vulnerability.
Fixed in 0.79.0-150200.3.21.2
Upgrade
Upgrade suse/poppler-tools to a version that resolves this vulnerability.
Fixed in 0.79.0-150200.3.21.2
Upgrade
Upgrade suse/libpoppler-glib8-debuginfo to a version that resolves this vulnerability.
Fixed in 0.79.0-150200.3.21.2
Upgrade
Upgrade suse/libpoppler-glib-devel to a version that resolves this vulnerability.
Fixed in 0.79.0-150200.3.21.2
Upgrade
Upgrade suse/libpoppler89-debuginfo to a version that resolves this vulnerability.
Fixed in 0.79.0-150200.3.21.2
Upgrade
Upgrade suse/libpoppler89 to a version that resolves this vulnerability.
Fixed in 32bit-debuginfo-0.79.0-150200.3.21.2
Upgrade
Upgrade suse/libpoppler89 to a version that resolves this vulnerability.
Fixed in 32bit-0.79.0-150200.3.21.2
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3998=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3998=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-3998=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-3998=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-3998=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-3998=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-3998=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-3998=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-3998=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-3998=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-3998=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3998=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2023-3998=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2023-3998=1

Event History

Oct 6, 2023

Advisory Published

04:30 PM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which installed components are covered by this update?

The update covers libpoppler89, libpoppler-cpp0, libpoppler-devel, typelib, poppler-debugsource, poppler-tools-debuginfo, and the listed debuginfo packages.

What impact do the addressed issues have?

The issues include uncontrolled recursion, a NULL pointer dereference, an abort, and a reachable assertion. Several are described as denial-of-service conditions affecting Poppler utilities or PDF processing paths.

Which Poppler tools or code paths are specifically mentioned?

The advisory identifies pdfinfo and pdftops for uncontrolled recursion, savePageAs in PDFDoc.c for denial of service, pdfunite.cc for an abort, and FoFiType1C::convertToType1 for a NULL pointer dereference.

SUSE-SU-2023:3998-1: Security update for poppler

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which installed components are covered by this update?

What impact do the addressed issues have?

Which Poppler tools or code paths are specifically mentioned?

Company

Resources

Contact

Frequently Asked Questions

Which installed components are covered by this update?

What impact do the addressed issues have?

Which Poppler tools or code paths are specifically mentioned?