USN-7426-1: poppler vulnerabilities

USN-7426-1: poppler vulnerabilities
8 April 2025

poppler could be made to crash if it opened a specially crafted PDF file.

Releases

• Ubuntu 24.10
• Ubuntu 24.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS

Packages

• poppler - PDF rendering library

Details
It was discovered that poppler incorrectly handled memory when opening
certain PDF files. An attacker could possibly use this issue to cause
poppler to crash, resulting in a denial of service.

Update instructions
The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.10

• libpoppler140 - 24.08.0-1ubuntu0.2
• poppler-utils - 24.08.0-1ubuntu0.2
  Ubuntu 24.04
• libpoppler134 - 24.02.0-1ubuntu9.3
• poppler-utils - 24.02.0-1ubuntu9.3
  Ubuntu 22.04
• libpoppler118 - 22.02.0-2ubuntu0.7
• poppler-utils - 22.02.0-2ubuntu0.7
  Ubuntu 20.04
• libpoppler97 - 0.86.1-0ubuntu1.6
• poppler-utils - 0.86.1-0ubuntu1.6
  In general, a standard system update will make all the necessary changes.