This update for poppler fixes the following issues:

- CVE-2024-56378: out-of-bounds read within JBIG2Bitmap::combine, which can lead to an application crash. (bsc#1234795)


              

References

---

• CVE: CVE-2024-56378
• Bugzilla: 1234795 VUL-0: CVE-2024-56378: poppler: out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc

Packages

---

• poppler-24.03.0-150600.3.5.1

• poppler-qt5-24.03.0-150600.3.5.1

• poppler-qt6-24.03.0-150600.3.5.1