This update for poppler fixes the following issues:
These security issues were fixed:
- CVE-2017-14617: Fixed a floating point exception in Stream.cc, which may lead
to a potential attack when handling malicious PDF files. (bsc#1060220)
- CVE-2017-1000456: Validate boundaries in TextPool::addWord to prevent
overflows in subsequent calculations (bsc#1074453)
- CVE-2017-15565: Prevent NULL Pointer dereference in the
GfxImageColorMap::getGrayLine() function via a crafted PDF document
(bsc#1064593)
- CVE-2018-10768: Prevent NULL pointer dereference in the
AnnotPath::getCoordsLength function. A crafted input could have lead to a
remote denial of service attack (bsc#1092105).
This update also fixes an additional segmentation fault that is trigger by the
reproducer for CVE-2017-14517 (bsc#1059066).