Bug#929423: poppler: CVE-2019-12293
carnil at debian.org
Thu May 23 09:50:49 BST 2019
Tags: security upstream
The following vulnerability was published for poppler.
| In Poppler through 0.76.1, there is a heap-based buffer over-read in
| JPXStream::init in JPEG2000Stream.cc via data with inconsistent
| heights or widths.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
Please adjust the affected versions in the BTS as needed.
More information about the Pkg-freedesktop-maintainers