RHBA-2012:0236 - Bug Fix Advisory

Topic

Updated poppler packages that fix several bugs are now available for Red Hat
Enterprise Linux 5.

Description

Poppler is a Portable Document Format (PDF) rendering library used by
applications such as Evince.

This update fixes the following bugs:

• When working with a PDF document with text spanning multiple columns, text

selection may not have followed the flow of the text. This update improves the
text selection to respect the text flow. (BZ#467285)

• A regression was introduced in the previous security update, RHSA-2009:0480,

that prevented poppler from rendering PDFs which contained arithmetically
encoded JBIG2 images with an unknown length. Specifically, poppler was unable to
render PDFs generated by a Xerox WorkCentre 7232 scanner. With this update, such
PDFs render correctly, as expected. (BZ#501716)

• Previously, poppler was unable to open some PDF files created with Adobe

Acrobat due to incorrect determination of the position in the JBIG2 stream. With
this update, such PDFs open correctly. (BZ#525311)

• Due to an error in memory allocation, previous versions of poppler may have

terminated unexpectedly while rendering certain PDF documents. With this update,
the underlying source code has been modified to address this issue, and poppler
no longer fails to render such PDF documents. (BZ#598945)

• Previously, poppler was unable to open some PDF files due to unsupported

security feature and the file opening failed with the following error:

Error: Unsupported version/revision (4/4) of Standard security handler
Error: Incorrect password

With this update, the underlying source code has been modified and such PDF
files open as expected. (BZ#637124)

• Prior to this update, certain PDF documents may have been rendered with some

characters displayed backwards. With this update, an upstream patch has been
applied to ensure that poppler takes into account the horizontal scaling when
updating the font, and such PDF documents are now rendered correctly.
(BZ#698052)

All users of poppler are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 467285 - evince doesn't select highlight properly
• BZ - 501716 - latest poppler security fix breaks compatibility with Xerox WorkCentre generated pdf documents
• BZ - 525311 - poppler yielding fatal error (Unexpected EOF in JBIG2 stream) on certain PDFs
• BZ - 598945 - Bogus memory allocation size when browsing a PDF in Evince
• BZ - 637124 - Evince cannot open PDF file because of unsupported security in poppler

CVEs

(none)

References

(none)