RHSA-2019:2022
Vulnerability from csaf_opensuse - Published: 2019-08-06 00:00 - Updated: 2026-09-20 11:03Summary
security update for evince
Severity
Moderate
Notes
Title of the patch: security update for evince
Description of the patch: This security update provides a functional equivalent of RHSA-2019:2022.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2019:2022.
Patchnames: RHSA-2019:2022
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
32 products, the same list as for
CVE-2018-16646
Threats
Impact
low
Affected products
Recommended
32 products, the same list as for
CVE-2018-16646
Threats
Impact
low
Affected products
Recommended
32 products, the same list as for
CVE-2018-16646
Threats
Impact
low
Affected products
Recommended
32 products, the same list as for
CVE-2018-16646
Threats
Impact
low
Affected products
Recommended
32 products, the same list as for
CVE-2018-16646
Threats
Impact
low
Affected products
Recommended
32 products, the same list as for
CVE-2018-16646
Threats
Impact
low
Affected products
Recommended
32 products, the same list as for
CVE-2018-16646
Threats
Impact
low
Affected products
Recommended
32 products, the same list as for
CVE-2018-16646
Threats
Impact
low
5.3 (Medium)
Affected products
Recommended
32 products, the same list as for
CVE-2018-16646
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
32 products, the same list as for
CVE-2018-16646
Threats
Impact
important
Affected products
Recommended
32 products, the same list as for
CVE-2018-16646
Threats
Impact
low
References
42 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for evince",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2019:2022.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2019:2022.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2019:2022",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2019_2022.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16646 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16646/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18897 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18897/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-19058 page",
"url": "https://www.suse.com/security/cve/CVE-2018-19058/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-19059 page",
"url": "https://www.suse.com/security/cve/CVE-2018-19059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-19060 page",
"url": "https://www.suse.com/security/cve/CVE-2018-19060/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-19149 page",
"url": "https://www.suse.com/security/cve/CVE-2018-19149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-20481 page",
"url": "https://www.suse.com/security/cve/CVE-2018-20481/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-20650 page",
"url": "https://www.suse.com/security/cve/CVE-2018-20650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-20662 page",
"url": "https://www.suse.com/security/cve/CVE-2018-20662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7310 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7310/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9200 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9200/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9631 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9631/"
}
],
"title": "security update for evince",
"tracking": {
"current_release_date": "2026-09-20T11:03:49Z",
"generator": {
"date": "2019-08-06T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2019:2022",
"initial_release_date": "2019-08-06T00:00:00Z",
"revision_history": [
{
"date": "2019-08-06T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:03:49Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "evince-devel-0:3.28.2-8.el7.i686",
"product": {
"name": "evince-devel-0:3.28.2-8.el7.i686",
"product_id": "evince-devel-0:3.28.2-8.el7.i686",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnome:evince:3.28.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/evince-devel@3.28.2-8.el7?arch=i686\u0026upstream=evince-0:3.28.2-8.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "evince-libs-0:3.28.2-8.el7.i686",
"product": {
"name": "evince-libs-0:3.28.2-8.el7.i686",
"product_id": "evince-libs-0:3.28.2-8.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/evince-libs@3.28.2-8.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "okular-devel-0:4.10.5-7.el7.i686",
"product": {
"name": "okular-devel-0:4.10.5-7.el7.i686",
"product_id": "okular-devel-0:4.10.5-7.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/okular-devel@4.10.5-7.el7?arch=i686\u0026upstream=kdegraphics4-0:4.10.5-7.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "okular-libs-0:4.10.5-7.el7.i686",
"product": {
"name": "okular-libs-0:4.10.5-7.el7.i686",
"product_id": "okular-libs-0:4.10.5-7.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/okular-libs@4.10.5-7.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "poppler-0:0.26.5-38.el7.i686",
"product": {
"name": "poppler-0:0.26.5-38.el7.i686",
"product_id": "poppler-0:0.26.5-38.el7.i686",
"product_identification_helper": {
"cpe": "cpe:2.3:a:freedesktop:poppler:0.26.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/poppler@0.26.5-38.el7?arch=i686\u0026upstream=poppler-0:0.26.5-38.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "poppler-cpp-0:0.26.5-38.el7.i686",
"product": {
"name": "poppler-cpp-0:0.26.5-38.el7.i686",
"product_id": "poppler-cpp-0:0.26.5-38.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/poppler-cpp@0.26.5-38.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "poppler-cpp-devel-0:0.26.5-38.el7.i686",
"product": {
"name": "poppler-cpp-devel-0:0.26.5-38.el7.i686",
"product_id": "poppler-cpp-devel-0:0.26.5-38.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/poppler-cpp-devel@0.26.5-38.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "poppler-devel-0:0.26.5-38.el7.i686",
"product": {
"name": "poppler-devel-0:0.26.5-38.el7.i686",
"product_id": "poppler-devel-0:0.26.5-38.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/poppler-devel@0.26.5-38.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "poppler-glib-0:0.26.5-38.el7.i686",
"product": {
"name": "poppler-glib-0:0.26.5-38.el7.i686",
"product_id": "poppler-glib-0:0.26.5-38.el7.i686",
"product_identification_helper": {
"cpe": "cpe:2.3:a:freedesktop:poppler:0.26.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/poppler-glib@0.26.5-38.el7?arch=i686\u0026upstream=poppler-0:0.26.5-38.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "poppler-glib-devel-0:0.26.5-38.el7.i686",
"product": {
"name": "poppler-glib-devel-0:0.26.5-38.el7.i686",
"product_id": "poppler-glib-devel-0:0.26.5-38.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/poppler-glib-devel@0.26.5-38.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "poppler-qt-0:0.26.5-38.el7.i686",
"product": {
"name": "poppler-qt-0:0.26.5-38.el7.i686",
"product_id": "poppler-qt-0:0.26.5-38.el7.i686",
"product_identification_helper": {
"cpe": "cpe:2.3:a:freedesktop:poppler:0.26.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/poppler-qt@0.26.5-38.el7?arch=i686\u0026upstream=poppler-0:0.26.5-38.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "poppler-qt-devel-0:0.26.5-38.el7.i686",
"product": {
"name": "poppler-qt-devel-0:0.26.5-38.el7.i686",
"product_id": "poppler-qt-devel-0:0.26.5-38.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/poppler-qt-devel@0.26.5-38.el7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "evince-0:3.28.2-8.el7.x86_64",
"product": {
"name": "evince-0:3.28.2-8.el7.x86_64",
"product_id": "evince-0:3.28.2-8.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnome:evince:3.28.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/evince@3.28.2-8.el7?arch=x86_64\u0026upstream=evince-0:3.28.2-8.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"product": {
"name": "evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"product_id": "evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnome:evince:3.28.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/evince-browser-plugin@3.28.2-8.el7?arch=x86_64\u0026upstream=evince-0:3.28.2-8.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "evince-devel-0:3.28.2-8.el7.x86_64",
"product": {
"name": "evince-devel-0:3.28.2-8.el7.x86_64",
"product_id": "evince-devel-0:3.28.2-8.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnome:evince:3.28.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/evince-devel@3.28.2-8.el7?arch=x86_64\u0026upstream=evince-0:3.28.2-8.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "evince-dvi-0:3.28.2-8.el7.x86_64",
"product": {
"name": "evince-dvi-0:3.28.2-8.el7.x86_64",
"product_id": "evince-dvi-0:3.28.2-8.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/evince-dvi@3.28.2-8.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "evince-libs-0:3.28.2-8.el7.x86_64",
"product": {
"name": "evince-libs-0:3.28.2-8.el7.x86_64",
"product_id": "evince-libs-0:3.28.2-8.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/evince-libs@3.28.2-8.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "evince-nautilus-0:3.28.2-8.el7.x86_64",
"product": {
"name": "evince-nautilus-0:3.28.2-8.el7.x86_64",
"product_id": "evince-nautilus-0:3.28.2-8.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/evince-nautilus@3.28.2-8.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "okular-0:4.10.5-7.el7.x86_64",
"product": {
"name": "okular-0:4.10.5-7.el7.x86_64",
"product_id": "okular-0:4.10.5-7.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:kde:okular:4.10.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/okular@4.10.5-7.el7?arch=x86_64\u0026upstream=ERROR_UNKNOWN-0:4.10.5-7.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "okular-devel-0:4.10.5-7.el7.x86_64",
"product": {
"name": "okular-devel-0:4.10.5-7.el7.x86_64",
"product_id": "okular-devel-0:4.10.5-7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/okular-devel@4.10.5-7.el7?arch=x86_64\u0026upstream=kdegraphics4-0:4.10.5-7.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "okular-libs-0:4.10.5-7.el7.x86_64",
"product": {
"name": "okular-libs-0:4.10.5-7.el7.x86_64",
"product_id": "okular-libs-0:4.10.5-7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/okular-libs@4.10.5-7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "okular-part-0:4.10.5-7.el7.x86_64",
"product": {
"name": "okular-part-0:4.10.5-7.el7.x86_64",
"product_id": "okular-part-0:4.10.5-7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/okular-part@4.10.5-7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "poppler-0:0.26.5-38.el7.x86_64",
"product": {
"name": "poppler-0:0.26.5-38.el7.x86_64",
"product_id": "poppler-0:0.26.5-38.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:freedesktop:poppler:0.26.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/poppler@0.26.5-38.el7?arch=x86_64\u0026upstream=poppler-0:0.26.5-38.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "poppler-cpp-0:0.26.5-38.el7.x86_64",
"product": {
"name": "poppler-cpp-0:0.26.5-38.el7.x86_64",
"product_id": "poppler-cpp-0:0.26.5-38.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/poppler-cpp@0.26.5-38.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"product": {
"name": "poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"product_id": "poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/poppler-cpp-devel@0.26.5-38.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "poppler-demos-0:0.26.5-38.el7.x86_64",
"product": {
"name": "poppler-demos-0:0.26.5-38.el7.x86_64",
"product_id": "poppler-demos-0:0.26.5-38.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/poppler-demos@0.26.5-38.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "poppler-devel-0:0.26.5-38.el7.x86_64",
"product": {
"name": "poppler-devel-0:0.26.5-38.el7.x86_64",
"product_id": "poppler-devel-0:0.26.5-38.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/poppler-devel@0.26.5-38.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "poppler-glib-0:0.26.5-38.el7.x86_64",
"product": {
"name": "poppler-glib-0:0.26.5-38.el7.x86_64",
"product_id": "poppler-glib-0:0.26.5-38.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:freedesktop:poppler:0.26.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/poppler-glib@0.26.5-38.el7?arch=x86_64\u0026upstream=poppler-0:0.26.5-38.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"product": {
"name": "poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"product_id": "poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/poppler-glib-devel@0.26.5-38.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "poppler-qt-0:0.26.5-38.el7.x86_64",
"product": {
"name": "poppler-qt-0:0.26.5-38.el7.x86_64",
"product_id": "poppler-qt-0:0.26.5-38.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:freedesktop:poppler:0.26.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/poppler-qt@0.26.5-38.el7?arch=x86_64\u0026upstream=poppler-0:0.26.5-38.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"product": {
"name": "poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"product_id": "poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/poppler-qt-devel@0.26.5-38.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "poppler-utils-0:0.26.5-38.el7.x86_64",
"product": {
"name": "poppler-utils-0:0.26.5-38.el7.x86_64",
"product_id": "poppler-utils-0:0.26.5-38.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/poppler-utils@0.26.5-38.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7",
"product": {
"name": "SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "evince-0:3.28.2-8.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64"
},
"product_reference": "evince-0:3.28.2-8.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "evince-browser-plugin-0:3.28.2-8.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64"
},
"product_reference": "evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "evince-devel-0:3.28.2-8.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686"
},
"product_reference": "evince-devel-0:3.28.2-8.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "evince-devel-0:3.28.2-8.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64"
},
"product_reference": "evince-devel-0:3.28.2-8.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "evince-dvi-0:3.28.2-8.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64"
},
"product_reference": "evince-dvi-0:3.28.2-8.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "evince-libs-0:3.28.2-8.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686"
},
"product_reference": "evince-libs-0:3.28.2-8.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "evince-libs-0:3.28.2-8.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64"
},
"product_reference": "evince-libs-0:3.28.2-8.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "evince-nautilus-0:3.28.2-8.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64"
},
"product_reference": "evince-nautilus-0:3.28.2-8.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-7.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64"
},
"product_reference": "okular-0:4.10.5-7.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-7.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686"
},
"product_reference": "okular-devel-0:4.10.5-7.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-7.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64"
},
"product_reference": "okular-devel-0:4.10.5-7.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-7.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686"
},
"product_reference": "okular-libs-0:4.10.5-7.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-7.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64"
},
"product_reference": "okular-libs-0:4.10.5-7.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-7.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64"
},
"product_reference": "okular-part-0:4.10.5-7.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-0:0.26.5-38.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686"
},
"product_reference": "poppler-0:0.26.5-38.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-0:0.26.5-38.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64"
},
"product_reference": "poppler-0:0.26.5-38.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-cpp-0:0.26.5-38.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686"
},
"product_reference": "poppler-cpp-0:0.26.5-38.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-cpp-0:0.26.5-38.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64"
},
"product_reference": "poppler-cpp-0:0.26.5-38.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-cpp-devel-0:0.26.5-38.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686"
},
"product_reference": "poppler-cpp-devel-0:0.26.5-38.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-cpp-devel-0:0.26.5-38.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64"
},
"product_reference": "poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-demos-0:0.26.5-38.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64"
},
"product_reference": "poppler-demos-0:0.26.5-38.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-devel-0:0.26.5-38.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686"
},
"product_reference": "poppler-devel-0:0.26.5-38.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-devel-0:0.26.5-38.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64"
},
"product_reference": "poppler-devel-0:0.26.5-38.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-glib-0:0.26.5-38.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686"
},
"product_reference": "poppler-glib-0:0.26.5-38.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-glib-0:0.26.5-38.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64"
},
"product_reference": "poppler-glib-0:0.26.5-38.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-glib-devel-0:0.26.5-38.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686"
},
"product_reference": "poppler-glib-devel-0:0.26.5-38.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-glib-devel-0:0.26.5-38.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64"
},
"product_reference": "poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-qt-0:0.26.5-38.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686"
},
"product_reference": "poppler-qt-0:0.26.5-38.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-qt-0:0.26.5-38.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64"
},
"product_reference": "poppler-qt-0:0.26.5-38.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-qt-devel-0:0.26.5-38.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686"
},
"product_reference": "poppler-qt-devel-0:0.26.5-38.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-qt-devel-0:0.26.5-38.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64"
},
"product_reference": "poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "poppler-utils-0:0.26.5-38.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
},
"product_reference": "poppler-utils-0:0.26.5-38.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-16646",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16646"
}
],
"notes": [
{
"category": "general",
"text": "In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16646",
"url": "https://www.suse.com/security/cve/CVE-2018-16646"
},
{
"category": "external",
"summary": "SUSE Bug 1107597 for CVE-2018-16646",
"url": "https://bugzilla.suse.com/1107597"
},
{
"category": "external",
"summary": "SUSE Bug 1140882 for CVE-2018-16646",
"url": "https://bugzilla.suse.com/1140882"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-16646"
},
{
"cve": "CVE-2018-18897",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18897"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18897",
"url": "https://www.suse.com/security/cve/CVE-2018-18897"
},
{
"category": "external",
"summary": "SUSE Bug 1114966 for CVE-2018-18897",
"url": "https://bugzilla.suse.com/1114966"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-18897"
},
{
"cve": "CVE-2018-19058",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-19058"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-19058",
"url": "https://www.suse.com/security/cve/CVE-2018-19058"
},
{
"category": "external",
"summary": "SUSE Bug 1115187 for CVE-2018-19058",
"url": "https://bugzilla.suse.com/1115187"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-19058"
},
{
"cve": "CVE-2018-19059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-19059"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating embedded files before save attempts.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-19059",
"url": "https://www.suse.com/security/cve/CVE-2018-19059"
},
{
"category": "external",
"summary": "SUSE Bug 1115186 for CVE-2018-19059",
"url": "https://bugzilla.suse.com/1115186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-19059"
},
{
"cve": "CVE-2018-19060",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-19060"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-19060",
"url": "https://www.suse.com/security/cve/CVE-2018-19060"
},
{
"category": "external",
"summary": "SUSE Bug 1115185 for CVE-2018-19060",
"url": "https://bugzilla.suse.com/1115185"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-19060"
},
{
"cve": "CVE-2018-19149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-19149"
}
],
"notes": [
{
"category": "general",
"text": "Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-19149",
"url": "https://www.suse.com/security/cve/CVE-2018-19149"
},
{
"category": "external",
"summary": "SUSE Bug 1115626 for CVE-2018-19149",
"url": "https://bugzilla.suse.com/1115626"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-19149"
},
{
"cve": "CVE-2018-20481",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-20481"
}
],
"notes": [
{
"category": "general",
"text": "XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-20481",
"url": "https://www.suse.com/security/cve/CVE-2018-20481"
},
{
"category": "external",
"summary": "SUSE Bug 1120495 for CVE-2018-20481",
"url": "https://bugzilla.suse.com/1120495"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-20481"
},
{
"cve": "CVE-2018-20650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-20650"
}
],
"notes": [
{
"category": "general",
"text": "A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetach.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-20650",
"url": "https://www.suse.com/security/cve/CVE-2018-20650"
},
{
"category": "external",
"summary": "SUSE Bug 1120939 for CVE-2018-20650",
"url": "https://bugzilla.suse.com/1120939"
},
{
"category": "external",
"summary": "SUSE Bug 1120956 for CVE-2018-20650",
"url": "https://bugzilla.suse.com/1120956"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-20650"
},
{
"cve": "CVE-2018-20662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-20662"
}
],
"notes": [
{
"category": "general",
"text": "In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-20662",
"url": "https://www.suse.com/security/cve/CVE-2018-20662"
},
{
"category": "external",
"summary": "SUSE Bug 1120939 for CVE-2018-20662",
"url": "https://bugzilla.suse.com/1120939"
},
{
"category": "external",
"summary": "SUSE Bug 1120956 for CVE-2018-20662",
"url": "https://bugzilla.suse.com/1120956"
},
{
"category": "external",
"summary": "SUSE Bug 1214622 for CVE-2018-20662",
"url": "https://bugzilla.suse.com/1214622"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-20662"
},
{
"cve": "CVE-2019-7310",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7310"
}
],
"notes": [
{
"category": "general",
"text": "In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7310",
"url": "https://www.suse.com/security/cve/CVE-2019-7310"
},
{
"category": "external",
"summary": "SUSE Bug 1124150 for CVE-2019-7310",
"url": "https://bugzilla.suse.com/1124150"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-7310"
},
{
"cve": "CVE-2019-9200",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9200"
}
],
"notes": [
{
"category": "general",
"text": "A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9200",
"url": "https://www.suse.com/security/cve/CVE-2019-9200"
},
{
"category": "external",
"summary": "SUSE Bug 1127329 for CVE-2019-9200",
"url": "https://bugzilla.suse.com/1127329"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-9200"
},
{
"cve": "CVE-2019-9631",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9631"
}
],
"notes": [
{
"category": "general",
"text": "Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9631",
"url": "https://www.suse.com/security/cve/CVE-2019-9631"
},
{
"category": "external",
"summary": "SUSE Bug 1129202 for CVE-2019-9631",
"url": "https://bugzilla.suse.com/1129202"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:evince-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-browser-plugin-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-devel-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-dvi-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.i686",
"SUSE Liberty Linux 7:evince-libs-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:evince-nautilus-0:3.28.2-8.el7.x86_64",
"SUSE Liberty Linux 7:okular-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-devel-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.i686",
"SUSE Liberty Linux 7:okular-libs-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:okular-part-0:4.10.5-7.el7.x86_64",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-cpp-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-demos-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-glib-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.i686",
"SUSE Liberty Linux 7:poppler-qt-devel-0:0.26.5-38.el7.x86_64",
"SUSE Liberty Linux 7:poppler-utils-0:0.26.5-38.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-9631"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.