Nixpkgs security tracker

Untriaged

Permalink CVE-2010-0207

created 1 month, 4 weeks ago

In xpdf, the xref table contains an infinite loop which …

In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF viewers.

References

https://security-tracker.debian.org/tracker/CVE-2010-0207 x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0207 x_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2010-0207 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0207 x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2010-0207 x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0207 x_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2010-0207 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0207 x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2010-0207 x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0207 x_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2010-0207 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0207 x_transferredx_refsource_MISC

Affected products

poppler

==0.26.5-2

Matching in nixpkgs

pkgs.poppler

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.poppler_gi

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.poppler_min

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.poppler_data

Encoding files for Poppler, a PDF rendering library

nixos-unstable 0.4.12
- nixpkgs-unstable 0.4.12
- nixos-unstable-small 0.4.12
nixos-25.11 0.4.12
- nixos-25.11-small 0.4.12
- nixpkgs-25.11-darwin 0.4.12

pkgs.poppler-utils

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.libsForQt5.poppler

PDF rendering library

nixos-unstable qt5-25.10.0
- nixpkgs-unstable qt5-25.10.0
- nixos-unstable-small qt5-25.10.0
nixos-25.11 qt5-25.10.0
- nixos-25.11-small qt5-25.10.0
- nixpkgs-25.11-darwin qt5-25.10.0

pkgs.kdePackages.poppler

PDF rendering library

nixos-unstable qt6-25.10.0
- nixpkgs-unstable qt6-25.10.0
- nixos-unstable-small qt6-25.10.0
nixos-25.11 qt6-25.10.0
- nixos-25.11-small qt6-25.10.0
- nixpkgs-25.11-darwin qt6-25.10.0

pkgs.qt6Packages.poppler

PDF rendering library

nixos-unstable qt6-25.10.0
- nixpkgs-unstable qt6-25.10.0
- nixos-unstable-small qt6-25.10.0
nixos-25.11 qt6-25.10.0
- nixos-25.11-small qt6-25.10.0
- nixpkgs-25.11-darwin qt6-25.10.0

pkgs.plasma5Packages.poppler

PDF rendering library

nixos-unstable qt5-25.10.0
- nixpkgs-unstable qt5-25.10.0
- nixos-unstable-small qt5-25.10.0
nixos-25.11 qt5-25.10.0
- nixos-25.11-small qt5-25.10.0
- nixpkgs-25.11-darwin qt5-25.10.0

pkgs.haskellPackages.gi-poppler

Poppler bindings

nixos-unstable 0.18.30
- nixpkgs-unstable 0.18.30
- nixos-unstable-small 0.18.30
nixos-25.11 0.18.30
- nixos-25.11-small 0.18.30
- nixpkgs-25.11-darwin 0.18.30

pkgs.python312Packages.poppler-qt5

None

nixos-25.11 qt5-21.3.0
- nixos-25.11-small qt5-21.3.0
- nixpkgs-25.11-darwin qt5-21.3.0

pkgs.python313Packages.poppler-qt5

None

nixos-unstable qt5-21.3.0
- nixpkgs-unstable qt5-21.3.0
- nixos-unstable-small qt5-21.3.0
nixos-25.11 qt5-21.3.0
- nixos-25.11-small qt5-21.3.0
- nixpkgs-25.11-darwin qt5-21.3.0

pkgs.python314Packages.poppler-qt5

None

nixos-unstable qt5-21.3.0
- nixpkgs-unstable qt5-21.3.0
- nixos-unstable-small qt5-21.3.0

pkgs.zathuraPkgs.zathura_pdf_poppler

Zathura PDF plugin (poppler)

nixos-unstable 0.3.4
- nixpkgs-unstable 2026.02.03
- nixos-unstable-small 2026.02.03
nixos-25.11 0.3.3
- nixos-25.11-small 0.3.3
- nixpkgs-25.11-darwin 0.3.3

pkgs.python312Packages.python-poppler

Python binding to poppler-cpp

nixos-25.11 0.4.1
- nixos-25.11-small 0.4.1
- nixpkgs-25.11-darwin 0.4.1

pkgs.python313Packages.python-poppler

Python binding to poppler-cpp

nixos-unstable 0.4.1
- nixpkgs-unstable 0.4.1
- nixos-unstable-small 0.4.1
nixos-25.11 0.4.1
- nixos-25.11-small 0.4.1
- nixpkgs-25.11-darwin 0.4.1

pkgs.python314Packages.python-poppler

Python binding to poppler-cpp

nixos-unstable 0.4.1
- nixpkgs-unstable 0.4.1
- nixos-unstable-small 0.4.1

pkgs.tests.pkg-config.defaultPkgConfigPackages.poppler-glib

Test whether poppler-glib-25.05.0 exposes pkg-config modules poppler-glib

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

Package maintainers

@jtojnar Jan Tojnar <jtojnar@gmail.com>
@ttuegel Thomas Tuegel <ttuegel@mailbox.org>
@onny Jonas Heinrich <onny@project-insanity.org>

Untriaged

Permalink CVE-2012-2142

created 1 month, 4 weeks ago

The error function in Error.cc in poppler before 0.21.4 allows …

The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.

References

http://www.openwall.com/lists/oss-security/2013/08/09/6 x_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/08/09/5 x_refsource_MISC
http://cgit.freedesktop.org/poppler/poppler/commit/?id=71bad47ed6a36d825b0d0899… x_refsource_MISC
http://cgit.freedesktop.org/poppler/poppler/commit/NEWS?id=2bc48d5369f1dbecfc4d… x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=789936 x_refsource_MISC
http://lists.opensuse.org/opensuse-updates/2013-08/msg00049.html x_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/08/09/6 x_transferredx_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/08/09/5 x_transferredx_refsource_MISC
http://cgit.freedesktop.org/poppler/poppler/commit/?id=71bad47ed6a36d825b0d0899… x_transferredx_refsource_MISC
http://cgit.freedesktop.org/poppler/poppler/commit/NEWS?id=2bc48d5369f1dbecfc4d… x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=789936 x_transferredx_refsource_MISC
http://lists.opensuse.org/opensuse-updates/2013-08/msg00049.html x_transferredx_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/08/09/6 x_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/08/09/5 x_refsource_MISC
http://cgit.freedesktop.org/poppler/poppler/commit/?id=71bad47ed6a36d825b0d0899… x_refsource_MISC
http://cgit.freedesktop.org/poppler/poppler/commit/NEWS?id=2bc48d5369f1dbecfc4d… x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=789936 x_refsource_MISC
http://lists.opensuse.org/opensuse-updates/2013-08/msg00049.html x_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/08/09/6 x_transferredx_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/08/09/5 x_transferredx_refsource_MISC
http://cgit.freedesktop.org/poppler/poppler/commit/?id=71bad47ed6a36d825b0d0899… x_transferredx_refsource_MISC
http://cgit.freedesktop.org/poppler/poppler/commit/NEWS?id=2bc48d5369f1dbecfc4d… x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=789936 x_transferredx_refsource_MISC
http://lists.opensuse.org/opensuse-updates/2013-08/msg00049.html x_transferredx_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/08/09/6 x_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/08/09/5 x_refsource_MISC
http://cgit.freedesktop.org/poppler/poppler/commit/?id=71bad47ed6a36d825b0d0899… x_refsource_MISC
http://cgit.freedesktop.org/poppler/poppler/commit/NEWS?id=2bc48d5369f1dbecfc4d… x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=789936 x_refsource_MISC
http://lists.opensuse.org/opensuse-updates/2013-08/msg00049.html x_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/08/09/6 x_transferredx_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/08/09/5 x_transferredx_refsource_MISC
http://cgit.freedesktop.org/poppler/poppler/commit/?id=71bad47ed6a36d825b0d0899… x_transferredx_refsource_MISC
http://cgit.freedesktop.org/poppler/poppler/commit/NEWS?id=2bc48d5369f1dbecfc4d… x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=789936 x_transferredx_refsource_MISC
http://lists.opensuse.org/opensuse-updates/2013-08/msg00049.html x_transferredx_refsource_MISC

Affected products

poppler

==before 0.21.4

Matching in nixpkgs

pkgs.poppler

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.poppler_gi

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.poppler_min

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.poppler_data

Encoding files for Poppler, a PDF rendering library

nixos-unstable 0.4.12
- nixpkgs-unstable 0.4.12
- nixos-unstable-small 0.4.12
nixos-25.11 0.4.12
- nixos-25.11-small 0.4.12
- nixpkgs-25.11-darwin 0.4.12

pkgs.poppler-utils

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.libsForQt5.poppler

PDF rendering library

nixos-unstable qt5-25.10.0
- nixpkgs-unstable qt5-25.10.0
- nixos-unstable-small qt5-25.10.0
nixos-25.11 qt5-25.10.0
- nixos-25.11-small qt5-25.10.0
- nixpkgs-25.11-darwin qt5-25.10.0

pkgs.kdePackages.poppler

PDF rendering library

nixos-unstable qt6-25.10.0
- nixpkgs-unstable qt6-25.10.0
- nixos-unstable-small qt6-25.10.0
nixos-25.11 qt6-25.10.0
- nixos-25.11-small qt6-25.10.0
- nixpkgs-25.11-darwin qt6-25.10.0

pkgs.qt6Packages.poppler

PDF rendering library

nixos-unstable qt6-25.10.0
- nixpkgs-unstable qt6-25.10.0
- nixos-unstable-small qt6-25.10.0
nixos-25.11 qt6-25.10.0
- nixos-25.11-small qt6-25.10.0
- nixpkgs-25.11-darwin qt6-25.10.0

pkgs.plasma5Packages.poppler

PDF rendering library

nixos-unstable qt5-25.10.0
- nixpkgs-unstable qt5-25.10.0
- nixos-unstable-small qt5-25.10.0
nixos-25.11 qt5-25.10.0
- nixos-25.11-small qt5-25.10.0
- nixpkgs-25.11-darwin qt5-25.10.0

pkgs.haskellPackages.gi-poppler

Poppler bindings

nixos-unstable 0.18.30
- nixpkgs-unstable 0.18.30
- nixos-unstable-small 0.18.30
nixos-25.11 0.18.30
- nixos-25.11-small 0.18.30
- nixpkgs-25.11-darwin 0.18.30

pkgs.python312Packages.poppler-qt5

None

nixos-25.11 qt5-21.3.0
- nixos-25.11-small qt5-21.3.0
- nixpkgs-25.11-darwin qt5-21.3.0

pkgs.python313Packages.poppler-qt5

None

nixos-unstable qt5-21.3.0
- nixpkgs-unstable qt5-21.3.0
- nixos-unstable-small qt5-21.3.0
nixos-25.11 qt5-21.3.0
- nixos-25.11-small qt5-21.3.0
- nixpkgs-25.11-darwin qt5-21.3.0

pkgs.python314Packages.poppler-qt5

None

nixos-unstable qt5-21.3.0
- nixpkgs-unstable qt5-21.3.0
- nixos-unstable-small qt5-21.3.0

pkgs.zathuraPkgs.zathura_pdf_poppler

Zathura PDF plugin (poppler)

nixos-unstable 0.3.4
- nixpkgs-unstable 2026.02.03
- nixos-unstable-small 2026.02.03
nixos-25.11 0.3.3
- nixos-25.11-small 0.3.3
- nixpkgs-25.11-darwin 0.3.3

pkgs.python312Packages.python-poppler

Python binding to poppler-cpp

nixos-25.11 0.4.1
- nixos-25.11-small 0.4.1
- nixpkgs-25.11-darwin 0.4.1

pkgs.python313Packages.python-poppler

Python binding to poppler-cpp

nixos-unstable 0.4.1
- nixpkgs-unstable 0.4.1
- nixos-unstable-small 0.4.1
nixos-25.11 0.4.1
- nixos-25.11-small 0.4.1
- nixpkgs-25.11-darwin 0.4.1

pkgs.python314Packages.python-poppler

Python binding to poppler-cpp

nixos-unstable 0.4.1
- nixpkgs-unstable 0.4.1
- nixos-unstable-small 0.4.1

pkgs.tests.pkg-config.defaultPkgConfigPackages.poppler-glib

Test whether poppler-glib-25.05.0 exposes pkg-config modules poppler-glib

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

Package maintainers

@jtojnar Jan Tojnar <jtojnar@gmail.com>
@ttuegel Thomas Tuegel <ttuegel@mailbox.org>
@onny Jonas Heinrich <onny@project-insanity.org>

Untriaged

Permalink CVE-2010-4654

created 1 month, 4 weeks ago

poppler before 0.16.3 has malformed commands that may cause corruption …

poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.

References

https://security-tracker.debian.org/tracker/CVE-2010-4654 x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4654 x_refsource_MISC
https://access.redhat.com/security/cve/cve-2010-4654 x_refsource_MISC
http://security.gentoo.org/glsa/glsa-201310-03.xml x_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2010-4654 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4654 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2010-4654 x_transferredx_refsource_MISC
http://security.gentoo.org/glsa/glsa-201310-03.xml x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2010-4654 x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4654 x_refsource_MISC
https://access.redhat.com/security/cve/cve-2010-4654 x_refsource_MISC
http://security.gentoo.org/glsa/glsa-201310-03.xml x_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2010-4654 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4654 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2010-4654 x_transferredx_refsource_MISC
http://security.gentoo.org/glsa/glsa-201310-03.xml x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2010-4654 x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4654 x_refsource_MISC
https://access.redhat.com/security/cve/cve-2010-4654 x_refsource_MISC
http://security.gentoo.org/glsa/glsa-201310-03.xml x_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2010-4654 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4654 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2010-4654 x_transferredx_refsource_MISC
http://security.gentoo.org/glsa/glsa-201310-03.xml x_transferredx_refsource_MISC

Affected products

poppler

==before 0.16.3

Matching in nixpkgs

pkgs.poppler

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.poppler_gi

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.poppler_min

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.poppler_data

Encoding files for Poppler, a PDF rendering library

nixos-unstable 0.4.12
- nixpkgs-unstable 0.4.12
- nixos-unstable-small 0.4.12
nixos-25.11 0.4.12
- nixos-25.11-small 0.4.12
- nixpkgs-25.11-darwin 0.4.12

pkgs.poppler-utils

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.libsForQt5.poppler

PDF rendering library

nixos-unstable qt5-25.10.0
- nixpkgs-unstable qt5-25.10.0
- nixos-unstable-small qt5-25.10.0
nixos-25.11 qt5-25.10.0
- nixos-25.11-small qt5-25.10.0
- nixpkgs-25.11-darwin qt5-25.10.0

pkgs.kdePackages.poppler

PDF rendering library

nixos-unstable qt6-25.10.0
- nixpkgs-unstable qt6-25.10.0
- nixos-unstable-small qt6-25.10.0
nixos-25.11 qt6-25.10.0
- nixos-25.11-small qt6-25.10.0
- nixpkgs-25.11-darwin qt6-25.10.0

pkgs.qt6Packages.poppler

PDF rendering library

nixos-unstable qt6-25.10.0
- nixpkgs-unstable qt6-25.10.0
- nixos-unstable-small qt6-25.10.0
nixos-25.11 qt6-25.10.0
- nixos-25.11-small qt6-25.10.0
- nixpkgs-25.11-darwin qt6-25.10.0

pkgs.plasma5Packages.poppler

PDF rendering library

nixos-unstable qt5-25.10.0
- nixpkgs-unstable qt5-25.10.0
- nixos-unstable-small qt5-25.10.0
nixos-25.11 qt5-25.10.0
- nixos-25.11-small qt5-25.10.0
- nixpkgs-25.11-darwin qt5-25.10.0

pkgs.haskellPackages.gi-poppler

Poppler bindings

nixos-unstable 0.18.30
- nixpkgs-unstable 0.18.30
- nixos-unstable-small 0.18.30
nixos-25.11 0.18.30
- nixos-25.11-small 0.18.30
- nixpkgs-25.11-darwin 0.18.30

pkgs.python312Packages.poppler-qt5

None

nixos-25.11 qt5-21.3.0
- nixos-25.11-small qt5-21.3.0
- nixpkgs-25.11-darwin qt5-21.3.0

pkgs.python313Packages.poppler-qt5

None

nixos-unstable qt5-21.3.0
- nixpkgs-unstable qt5-21.3.0
- nixos-unstable-small qt5-21.3.0
nixos-25.11 qt5-21.3.0
- nixos-25.11-small qt5-21.3.0
- nixpkgs-25.11-darwin qt5-21.3.0

pkgs.python314Packages.poppler-qt5

None

nixos-unstable qt5-21.3.0
- nixpkgs-unstable qt5-21.3.0
- nixos-unstable-small qt5-21.3.0

pkgs.zathuraPkgs.zathura_pdf_poppler

Zathura PDF plugin (poppler)

nixos-unstable 0.3.4
- nixpkgs-unstable 2026.02.03
- nixos-unstable-small 2026.02.03
nixos-25.11 0.3.3
- nixos-25.11-small 0.3.3
- nixpkgs-25.11-darwin 0.3.3

pkgs.python312Packages.python-poppler

Python binding to poppler-cpp

nixos-25.11 0.4.1
- nixos-25.11-small 0.4.1
- nixpkgs-25.11-darwin 0.4.1

pkgs.python313Packages.python-poppler

Python binding to poppler-cpp

nixos-unstable 0.4.1
- nixpkgs-unstable 0.4.1
- nixos-unstable-small 0.4.1
nixos-25.11 0.4.1
- nixos-25.11-small 0.4.1
- nixpkgs-25.11-darwin 0.4.1

pkgs.python314Packages.python-poppler

Python binding to poppler-cpp

nixos-unstable 0.4.1
- nixpkgs-unstable 0.4.1
- nixos-unstable-small 0.4.1

pkgs.tests.pkg-config.defaultPkgConfigPackages.poppler-glib

Test whether poppler-glib-25.05.0 exposes pkg-config modules poppler-glib

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

Package maintainers

@jtojnar Jan Tojnar <jtojnar@gmail.com>
@ttuegel Thomas Tuegel <ttuegel@mailbox.org>
@onny Jonas Heinrich <onny@project-insanity.org>

Untriaged

Permalink CVE-2010-4653

created 1 month, 4 weeks ago

An integer overflow condition in poppler before 0.16.3 can occur …

An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.

References

https://security-tracker.debian.org/tracker/CVE-2010-4653 x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4653 x_refsource_MISC
https://access.redhat.com/security/cve/cve-2010-4653 x_refsource_MISC
http://security.gentoo.org/glsa/glsa-201310-03.xml x_refsource_MISC
http://www.securityfocus.com/bid/45948 x_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2010-4653 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4653 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2010-4653 x_transferredx_refsource_MISC
http://security.gentoo.org/glsa/glsa-201310-03.xml x_transferredx_refsource_MISC
http://www.securityfocus.com/bid/45948 x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2010-4653 x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4653 x_refsource_MISC
https://access.redhat.com/security/cve/cve-2010-4653 x_refsource_MISC
http://security.gentoo.org/glsa/glsa-201310-03.xml x_refsource_MISC
http://www.securityfocus.com/bid/45948 x_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2010-4653 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4653 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2010-4653 x_transferredx_refsource_MISC
http://security.gentoo.org/glsa/glsa-201310-03.xml x_transferredx_refsource_MISC
http://www.securityfocus.com/bid/45948 x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2010-4653 x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4653 x_refsource_MISC
https://access.redhat.com/security/cve/cve-2010-4653 x_refsource_MISC
http://security.gentoo.org/glsa/glsa-201310-03.xml x_refsource_MISC
http://www.securityfocus.com/bid/45948 x_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2010-4653 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4653 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2010-4653 x_transferredx_refsource_MISC
http://security.gentoo.org/glsa/glsa-201310-03.xml x_transferredx_refsource_MISC
http://www.securityfocus.com/bid/45948 x_transferredx_refsource_MISC

Affected products

poppler

==before 0.16.3

Matching in nixpkgs

pkgs.poppler

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.poppler_gi

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.poppler_min

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.poppler_data

Encoding files for Poppler, a PDF rendering library

nixos-unstable 0.4.12
- nixpkgs-unstable 0.4.12
- nixos-unstable-small 0.4.12
nixos-25.11 0.4.12
- nixos-25.11-small 0.4.12
- nixpkgs-25.11-darwin 0.4.12

pkgs.poppler-utils

PDF rendering library

nixos-unstable 25.10.0
- nixpkgs-unstable 25.10.0
- nixos-unstable-small 25.10.0
nixos-25.11 25.10.0
- nixos-25.11-small 25.10.0
- nixpkgs-25.11-darwin 25.10.0

pkgs.libsForQt5.poppler

PDF rendering library

nixos-unstable qt5-25.10.0
- nixpkgs-unstable qt5-25.10.0
- nixos-unstable-small qt5-25.10.0
nixos-25.11 qt5-25.10.0
- nixos-25.11-small qt5-25.10.0
- nixpkgs-25.11-darwin qt5-25.10.0

pkgs.kdePackages.poppler

PDF rendering library

nixos-unstable qt6-25.10.0
- nixpkgs-unstable qt6-25.10.0
- nixos-unstable-small qt6-25.10.0
nixos-25.11 qt6-25.10.0
- nixos-25.11-small qt6-25.10.0
- nixpkgs-25.11-darwin qt6-25.10.0

pkgs.qt6Packages.poppler

PDF rendering library

nixos-unstable qt6-25.10.0
- nixpkgs-unstable qt6-25.10.0
- nixos-unstable-small qt6-25.10.0
nixos-25.11 qt6-25.10.0
- nixos-25.11-small qt6-25.10.0
- nixpkgs-25.11-darwin qt6-25.10.0

pkgs.plasma5Packages.poppler

PDF rendering library

nixos-unstable qt5-25.10.0
- nixpkgs-unstable qt5-25.10.0
- nixos-unstable-small qt5-25.10.0
nixos-25.11 qt5-25.10.0
- nixos-25.11-small qt5-25.10.0
- nixpkgs-25.11-darwin qt5-25.10.0

pkgs.haskellPackages.gi-poppler

Poppler bindings

nixos-unstable 0.18.30
- nixpkgs-unstable 0.18.30
- nixos-unstable-small 0.18.30
nixos-25.11 0.18.30
- nixos-25.11-small 0.18.30
- nixpkgs-25.11-darwin 0.18.30

pkgs.python312Packages.poppler-qt5

None

nixos-25.11 qt5-21.3.0
- nixos-25.11-small qt5-21.3.0
- nixpkgs-25.11-darwin qt5-21.3.0

pkgs.python313Packages.poppler-qt5

None

nixos-unstable qt5-21.3.0
- nixpkgs-unstable qt5-21.3.0
- nixos-unstable-small qt5-21.3.0
nixos-25.11 qt5-21.3.0
- nixos-25.11-small qt5-21.3.0
- nixpkgs-25.11-darwin qt5-21.3.0

pkgs.python314Packages.poppler-qt5

None

nixos-unstable qt5-21.3.0
- nixpkgs-unstable qt5-21.3.0
- nixos-unstable-small qt5-21.3.0

pkgs.zathuraPkgs.zathura_pdf_poppler

Zathura PDF plugin (poppler)

nixos-unstable 0.3.4
- nixpkgs-unstable 2026.02.03
- nixos-unstable-small 2026.02.03
nixos-25.11 0.3.3
- nixos-25.11-small 0.3.3
- nixpkgs-25.11-darwin 0.3.3

pkgs.python312Packages.python-poppler

Python binding to poppler-cpp

nixos-25.11 0.4.1
- nixos-25.11-small 0.4.1
- nixpkgs-25.11-darwin 0.4.1

pkgs.python313Packages.python-poppler

Python binding to poppler-cpp

nixos-unstable 0.4.1
- nixpkgs-unstable 0.4.1
- nixos-unstable-small 0.4.1
nixos-25.11 0.4.1
- nixos-25.11-small 0.4.1
- nixpkgs-25.11-darwin 0.4.1

pkgs.python314Packages.python-poppler

Python binding to poppler-cpp

nixos-unstable 0.4.1
- nixpkgs-unstable 0.4.1
- nixos-unstable-small 0.4.1

pkgs.tests.pkg-config.defaultPkgConfigPackages.poppler-glib

Test whether poppler-glib-25.05.0 exposes pkg-config modules poppler-glib

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

Package maintainers

@jtojnar Jan Tojnar <jtojnar@gmail.com>
@ttuegel Thomas Tuegel <ttuegel@mailbox.org>
@onny Jonas Heinrich <onny@project-insanity.org>

Untriaged

Permalink CVE-2024-6239

7.5 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 1 year, 3 months ago

Poppler: pdfinfo: crash in broken documents when using -dests parameter

A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service.

References

RHSA-2024:5305 vendor-advisoryx_refsource_REDHAT
RHSA-2024:9167 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293594 x_refsource_REDHATissue-trackingx_transferred
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293594 x_refsource_REDHATissue-trackingx_transferred
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293594 x_refsource_REDHATissue-trackingx_transferred
RHSA-2024:5305 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293594 x_refsource_REDHATissue-trackingx_transferred
RHSA-2024:5305 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293594 x_refsource_REDHATissue-trackingx_transferred
RHSA-2024:5305 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293594 x_refsource_REDHATissue-trackingx_transferred
RHSA-2024:5305 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293594 x_refsource_REDHATissue-trackingx_transferred
RHSA-2024:5305 vendor-advisoryx_refsource_REDHAT
RHSA-2024:9167 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293594 x_refsource_REDHATissue-trackingx_transferred
RHSA-2024:5305 vendor-advisoryx_refsource_REDHAT
RHSA-2024:9167 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293594 x_refsource_REDHATissue-trackingx_transferred
RHSA-2024:5305 vendor-advisoryx_refsource_REDHAT
RHSA-2024:9167 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293594 x_refsource_REDHATissue-trackingx_transferred
RHSA-2024:5305 vendor-advisoryx_refsource_REDHAT
RHSA-2024:9167 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293594 x_refsource_REDHATissue-trackingx_transferred
RHSA-2024:5305 vendor-advisoryx_refsource_REDHAT
RHSA-2024:9167 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293594 x_refsource_REDHATissue-trackingx_transferred
RHSA-2024:5305 vendor-advisoryx_refsource_REDHAT
RHSA-2024:9167 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293594 x_refsource_REDHATissue-trackingx_transferred
RHSA-2024:5305 vendor-advisoryx_refsource_REDHAT
RHSA-2024:9167 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293594 x_refsource_REDHATissue-trackingx_transferred
RHSA-2024:5305 vendor-advisoryx_refsource_REDHAT
RHSA-2024:9167 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHAT
RHBZ#2293594 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2024-6239 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293594 x_refsource_REDHATissue-trackingx_transferred

Affected products

poppler

*
=<24.06.1

compat-poppler022

gimp:flatpak/poppler

*

inkscape:flatpak/poppler

*

libreoffice:flatpak/poppler

*

Matching in nixpkgs

pkgs.poppler

PDF rendering library

nixos-unstable 24.02.0
- nixpkgs-unstable 24.02.0
- nixos-unstable-small 24.02.0

pkgs.poppler_gi

PDF rendering library

nixos-unstable 24.02.0
- nixpkgs-unstable 24.02.0
- nixos-unstable-small 24.02.0

pkgs.poppler_min

PDF rendering library

nixos-unstable 24.02.0
- nixpkgs-unstable 24.02.0
- nixos-unstable-small 24.02.0

pkgs.poppler_data

Encoding files for Poppler, a PDF rendering library

nixos-unstable 0.4.12
- nixpkgs-unstable 0.4.12
- nixos-unstable-small 0.4.12

pkgs.poppler_utils

PDF rendering library

nixos-unstable 24.02.0
- nixpkgs-unstable 24.02.0
- nixos-unstable-small 24.02.0

pkgs.libsForQt5.poppler

PDF rendering library

nixos-unstable qt5-24.02.0
- nixpkgs-unstable qt5-24.02.0
- nixos-unstable-small qt5-24.02.0

pkgs.kdePackages.poppler

PDF rendering library

nixos-unstable qt6-24.02.0
- nixpkgs-unstable qt6-24.02.0
- nixos-unstable-small qt6-24.02.0

pkgs.qt6Packages.poppler

PDF rendering library

nixos-unstable qt6-24.02.0
- nixpkgs-unstable qt6-24.02.0
- nixos-unstable-small qt6-24.02.0

pkgs.plasma5Packages.poppler

PDF rendering library

nixos-unstable qt5-24.02.0
- nixpkgs-unstable qt5-24.02.0
- nixos-unstable-small qt5-24.02.0

pkgs.haskellPackages.gi-poppler

Poppler bindings

nixos-unstable 0.18.30
- nixpkgs-unstable 0.18.30
- nixos-unstable-small 0.18.30

pkgs.python311Packages.poppler-qt5

None

nixos-unstable qt5-21.3.0
- nixpkgs-unstable qt5-21.3.0
- nixos-unstable-small qt5-21.3.0

pkgs.python312Packages.poppler-qt5

None

nixos-unstable qt5-21.3.0
- nixpkgs-unstable qt5-21.3.0
- nixos-unstable-small qt5-21.3.0

pkgs.python311Packages.python-poppler

Python binding to poppler-cpp

nixos-unstable 0.4.1
- nixpkgs-unstable 0.4.1
- nixos-unstable-small 0.4.1

pkgs.python312Packages.python-poppler

Python binding to poppler-cpp

nixos-unstable 0.4.1
- nixpkgs-unstable 0.4.1
- nixos-unstable-small 0.4.1

pkgs.tests.pkg-config.defaultPkgConfigPackages.poppler-glib

Test whether poppler-glib-24.02.0 exposes pkg-config modules poppler-glib

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

Package maintainers

@ttuegel Thomas Tuegel <ttuegel@mailbox.org>
@jtojnar Jan Tojnar <jtojnar@gmail.com>
@onny Jonas Heinrich <onny@project-insanity.org>

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.poppler

pkgs.poppler_gi

pkgs.poppler_min

pkgs.poppler_data

pkgs.poppler-utils

pkgs.libsForQt5.poppler

pkgs.kdePackages.poppler

pkgs.qt6Packages.poppler

pkgs.plasma5Packages.poppler

pkgs.haskellPackages.gi-poppler

pkgs.python312Packages.poppler-qt5

pkgs.python313Packages.poppler-qt5

pkgs.python314Packages.poppler-qt5

pkgs.zathuraPkgs.zathura_pdf_poppler

pkgs.python312Packages.python-poppler

pkgs.python313Packages.python-poppler

pkgs.python314Packages.python-poppler

pkgs.tests.pkg-config.defaultPkgConfigPackages.poppler-glib

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.poppler

pkgs.poppler_gi

pkgs.poppler_min

pkgs.poppler_data

pkgs.poppler-utils

pkgs.libsForQt5.poppler

pkgs.kdePackages.poppler

pkgs.qt6Packages.poppler

pkgs.plasma5Packages.poppler

pkgs.haskellPackages.gi-poppler

pkgs.python312Packages.poppler-qt5

pkgs.python313Packages.poppler-qt5

pkgs.python314Packages.poppler-qt5

pkgs.zathuraPkgs.zathura_pdf_poppler

pkgs.python312Packages.python-poppler

pkgs.python313Packages.python-poppler

pkgs.python314Packages.python-poppler

pkgs.tests.pkg-config.defaultPkgConfigPackages.poppler-glib

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.poppler

pkgs.poppler_gi

pkgs.poppler_min

pkgs.poppler_data

pkgs.poppler-utils

pkgs.libsForQt5.poppler

pkgs.kdePackages.poppler

pkgs.qt6Packages.poppler

pkgs.plasma5Packages.poppler

pkgs.haskellPackages.gi-poppler

pkgs.python312Packages.poppler-qt5

pkgs.python313Packages.poppler-qt5

pkgs.python314Packages.poppler-qt5

pkgs.zathuraPkgs.zathura_pdf_poppler

pkgs.python312Packages.python-poppler

pkgs.python313Packages.python-poppler

pkgs.python314Packages.python-poppler

pkgs.tests.pkg-config.defaultPkgConfigPackages.poppler-glib

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.poppler

pkgs.poppler_gi

pkgs.poppler_min

pkgs.poppler_data

pkgs.poppler-utils

pkgs.libsForQt5.poppler

pkgs.kdePackages.poppler

pkgs.qt6Packages.poppler

pkgs.plasma5Packages.poppler

pkgs.haskellPackages.gi-poppler