Poppler: Multiple vulnerabilities Multiple vulnerabilities have been found in Poppler, allowing remote attackers to execute arbitrary code or cause a Denial of Service condition. poppler January 21, 2014 January 21, 2014: 1 489720 496770 remote 0.24.5 0.24.5

Poppler is a cross-platform PDF rendering library originally based on Xpdf.

Multiple vulnerabilities have been discovered in Poppler. Please review the CVE identifiers referenced below for details.

A remote attacker could entice a user to open a specially crafted PDF in an application linked against Poppler, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.

There is no known workaround at this time.

All Poppler users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=app-text/poppler-0.24.5" CVE-2013-4473 CVE-2013-4474 CVE-2013-7296 Zlogene Zlogene