CVE catalog

CVE-2019-13283

xpdf affected and fixed versions

[CVE catalog]

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc because it does not ensure the source string has a valid length before making a fixed-length copy. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file to cause Denial of Service or an information leak, or possibly have unspecified other impact.

Severity
Medium · CVSS 4.4CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
1.13% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
DebiantrixiexpdfNot reportedNot affectedDistribution reports not affected[CVE-2019-13283]
Debiantrixiexpdf3.04+git20250304-1Not affected[CVE-2019-13283]
DebiansidxpdfNot reportedNot affectedDistribution reports not affected[CVE-2019-13283]
Debiansidxpdf3.04+git20260802-1Not affected[CVE-2019-13283]
Suseopenstack cloud crowbar 9poppler0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suseopenstack cloud crowbar 9poppler-qt0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suseopenstack cloud 9poppler0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suseopenstack cloud 9poppler-qt0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise software development kit 12 sp5poppler0.24.4-14.23.1UnknownSource applicability is not established[SUSE-SU-2023:0496-1]
Suselinux enterprise software development kit 12 sp5poppler0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise software development kit 12 sp5poppler-qt0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise server for sap applications 15 sp1poppler0.62.0-150000.4.9.1UnknownSource applicability is not established[SUSE-SU-2023:0480-1]

Showing 12 observations. All 50 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
DebianbookwormxpdfNot reportedNot affectedDistribution reports not affected[CVE-2019-13283]
Debianbookwormxpdf3.04+git20220601-1Not affected[CVE-2019-13283]
DebianforkyxpdfNot reportedNot affectedDistribution reports not affected[CVE-2019-13283]
Debianforkyxpdf3.04+git20260802-1Not affected[CVE-2019-13283]
DebiansidxpdfNot reportedNot affectedDistribution reports not affected[CVE-2019-13283]
Debiansidxpdf3.04+git20260802-1Not affected[CVE-2019-13283]
DebiantrixiexpdfNot reportedNot affectedDistribution reports not affected[CVE-2019-13283]
Debiantrixiexpdf3.04+git20250304-1Not affected[CVE-2019-13283]
Opensuseleap 15.4poppler0.62.0-150000.4.9.1UnknownSource applicability is not established[SUSE-SU-2023:0480-1]
Suselinux enterprise high performance computing 15 sp1-ltsspoppler0.62.0-150000.4.9.1UnknownSource applicability is not established[SUSE-SU-2023:0480-1]
Suselinux enterprise server 12 sp2-bclpoppler0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise server 12 sp2-bclpoppler-qt0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise server 12 sp4-espospoppler0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise server 12 sp4-espospoppler-qt0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise server 12 sp4-ltsspoppler0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise server 12 sp4-ltsspoppler-qt0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise server 12 sp5poppler0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise server 12 sp5poppler-qt0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise server 15 sp1-ltsspoppler0.62.0-150000.4.9.1UnknownSource applicability is not established[SUSE-SU-2023:0480-1]
Suselinux enterprise server for sap applications 12 sp4poppler0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise server for sap applications 12 sp4poppler-qt0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise server for sap applications 12 sp5poppler0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise server for sap applications 12 sp5poppler-qt0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise server for sap applications 15 sp1poppler0.62.0-150000.4.9.1UnknownSource applicability is not established[SUSE-SU-2023:0480-1]
Suselinux enterprise software development kit 12 sp5poppler0.24.4-14.23.1UnknownSource applicability is not established[SUSE-SU-2023:0496-1]
Suselinux enterprise software development kit 12 sp5poppler0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suselinux enterprise software development kit 12 sp5poppler-qt0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suseopenstack cloud 9poppler0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suseopenstack cloud 9poppler-qt0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suseopenstack cloud crowbar 9poppler0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Suseopenstack cloud crowbar 9poppler-qt0.43.0-16.22.1UnknownSource applicability is not established[SUSE-SU-2023:0494-1]
Ubuntu16.04poppler0.33.0-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.37.0-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.38.0-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1.1UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1.10UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1.11UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1.12UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1.13UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1.14UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1.15UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1.2UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1.3UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1.4UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1.5UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1.6UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1.7UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1.8UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Ubuntu16.04poppler0.41.0-0ubuntu1.9UnknownSource applicability is not established[UBUNTU-CVE-2019-13283]
Original provider fields
{
  "package_releases": [
    {
      "name": "xpdf",
      "status": "not affected",
      "release": "sid",
      "version": "3.04+git20260802-1"
    },
    {
      "name": "xpdf",
      "status": "not affected",
      "release": "forky",
      "version": "3.04+git20260802-1"
    },
    {
      "name": "xpdf",
      "status": "not affected",
      "release": "trixie",
      "version": "3.04+git20250304-1"
    },
    {
      "name": "xpdf",
      "status": "not affected",
      "release": "bookworm",
      "version": "3.04+git20220601-1"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "xpdf",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "xpdf",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "xpdf",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "xpdf",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": "0"
    }
  ],
  "distribution_packages": [
    {
      "name": "poppler",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.41.0-0ubuntu1.15"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "0.33.0-0ubuntu3",
        "0.37.0-0ubuntu1",
        "0.38.0-0ubuntu1",
        "0.41.0-0ubuntu1",
        "0.41.0-0ubuntu1.1",
        "0.41.0-0ubuntu1.2",
        "0.41.0-0ubuntu1.3",
        "0.41.0-0ubuntu1.4",
        "0.41.0-0ubuntu1.5",
        "0.41.0-0ubuntu1.6",
        "0.41.0-0ubuntu1.7",
        "0.41.0-0ubuntu1.8",
        "0.41.0-0ubuntu1.9",
        "0.41.0-0ubuntu1.10",
        "0.41.0-0ubuntu1.11",
        "0.41.0-0ubuntu1.12",
        "0.41.0-0ubuntu1.13",
        "0.41.0-0ubuntu1.14"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2019-13283",
      "fixed_version": "0.41.0-0ubuntu1.15",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2019-13283",
      "provider_updated_at": "2026-04-22T12:09:05.885200Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.62.0-150000.4.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0480-1",
      "fixed_version": "0.62.0-150000.4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0480-1",
      "provider_updated_at": "2026-02-04T02:49:21.466417Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.62.0-150000.4.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0480-1",
      "fixed_version": "0.62.0-150000.4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0480-1",
      "provider_updated_at": "2026-02-04T02:49:21.466417Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.62.0-150000.4.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0480-1",
      "fixed_version": "0.62.0-150000.4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0480-1",
      "provider_updated_at": "2026-02-04T02:49:21.466417Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.62.0-150000.4.9.1"
            }
          ]
        }
      ],
      "release": "leap 15.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0480-1",
      "fixed_version": "0.62.0-150000.4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0480-1",
      "provider_updated_at": "2026-02-04T02:49:21.466417Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.24.4-14.23.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0496-1",
      "fixed_version": "0.24.4-14.23.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0496-1",
      "provider_updated_at": "2026-02-04T02:45:46.228103Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler-qt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler-qt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler-qt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler-qt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp2-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler-qt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp2-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp4-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler-qt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp4-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler-qt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler-qt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    },
    {
      "name": "poppler-qt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.43.0-16.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0494-1",
      "fixed_version": "0.43.0-16.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0494-1",
      "provider_updated_at": "2026-02-04T02:27:59.178270Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [xpdf]Unknown

    Source package: [xpdf]

    Details (2)

    • 3.04+git20220601-1+b2 · amd64 · bookworm

      Not affected

      dsa · xpdf · debian · bookworm

    • 3.04+git20220601-1+b2 · arm64 · bookworm

      Not affected

      dsa · xpdf · debian · bookworm

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]