tocsin

Debian/poppler: medium 6.5

A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class

Action: Upgrade poppler to 0.85.0-2 or later.

Affected

introducedfixedlast affected
00.85.0-2-

Fixed versions

0.85.0-2

Sources

published · modified · JSON