poppler-0.26.5-17.el7

Poppler is a Portable Document Format (PDF) rendering library, used by
applications such as Evince.

Security Fix(es):

* A stack-based buffer overflow was found in the poppler library. An attacker could create a malicious PDF file that would cause applications that use poppler (such as Evince) to crash, or potentially execute arbitrary code when opened. (CVE-2017-9775)

* An integer overflow leading to heap-based buffer overflow was found in the poppler library. An attacker could create a malicious PDF file that would cause applications that use poppler (such as Evince) to crash, or potentially execute arbitrary code when opened. (CVE-2017-9776)

CVE-2017-9775
Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before
0.56 allows remote attackers to cause a denial of service (application
crash) via a crafted PDF document.
CVE-2017-9776
Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in
pdftocairo in Poppler before 0.56 allows remote attackers to cause a
denial of service (application crash) or possibly have unspecified
other impact via a crafted PDF document.