{"id":"CLSA-2026-1787396206","summary":"Fix CVE(s): CVE-2024-6239","details":"   * SECURITY UPDATE: crash in pdfinfo -dests on broken documents:\n     printDestinations() wrapped the destination name returned by\n     Catalog::getDestNameTreeName() / Catalog::getDestsName() into a new\n     GooString before testing it, so a document whose name tree is short or\n     whose /Dests entry is not a dictionary made both getters return NULL and\n     the GooString constructor dereference it, crashing pdfinfo.\n     - debian/patches/CVE-2024-6239.patch: read the raw name pointer first and\n       only build the GooString once name, dest and dest-\u003eisPageRef() have all\n       been checked, in utils/pdfinfo.cc; matches upstream commit 0554731.\n     - CVE-2024-6239","modified":"2026-10-26T09:31:47.702939593Z","published":"2026-08-22T10:56:56Z","upstream":["CVE-2024-6239"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787396206.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6239"}],"affected":[{"package":{"name":"gir1.2-poppler-0.18","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/gir1.2-poppler-0.18?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787396206.json"}},{"package":{"name":"libpoppler-cpp-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libpoppler-cpp-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787396206.json"}},{"package":{"name":"libpoppler-cpp0v5","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libpoppler-cpp0v5?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787396206.json"}},{"package":{"name":"libpoppler-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libpoppler-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787396206.json"}},{"package":{"name":"libpoppler-glib-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libpoppler-glib-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787396206.json"}},{"package":{"name":"libpoppler-glib-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libpoppler-glib-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787396206.json"}},{"package":{"name":"libpoppler-glib8","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libpoppler-glib8?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787396206.json"}},{"package":{"name":"libpoppler-private-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libpoppler-private-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787396206.json"}},{"package":{"name":"libpoppler-qt5-1","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libpoppler-qt5-1?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787396206.json"}},{"package":{"name":"libpoppler-qt5-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libpoppler-qt5-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787396206.json"}},{"package":{"name":"libpoppler73","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libpoppler73?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787396206.json"}},{"package":{"name":"poppler-utils","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/poppler-utils?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787396206.json"}}],"schema_version":"1.9.0"}