fix cves

CVE-2018-19059.patch

@@ -20,13 +20,13 @@ index 846584a4..a8720c64 100644
 -      if (!fileSpec->getEmbeddedFile()->save(path)) {
 +      auto *embFile = fileSpec->getEmbeddedFile();
 +      if (!embFile || !embFile->isOk()) {
-+       exitCode = 3;
-+       goto err2;
++	exitCode = 3;
++	goto err2;
 +      }
 +      if (!embFile->save(path)) {
-        error(errIO, -1, "Error saving embedded file as '{0:s}'", p);
-        exitCode = 2;
-        goto err2;
+ 	error(errIO, -1, "Error saving embedded file as '{0:s}'", p);
+ 	exitCode = 2;
+ 	goto err2;
 @@ -295,7 +300,12 @@ int main(int argc, char *argv[]) {
        p = path;
      }
@@ -43,4 +43,3 @@ index 846584a4..a8720c64 100644
        goto err2;
 -- 
 2.24.1
-

poppler.spec

@@ -3,7 +3,7 @@
  
 Name:           poppler
 Version:        0.67.0
-Release:        4
+Release:        5
 Summary:        Poppler is a PDF rendering library based on the xpdf-3.0 code base
 License:        (GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
 URL:            https://poppler.freedesktop.org/
@@ -238,6 +238,12 @@ test "$(pkg-config --modversion poppler-splash)" = "%{version}"
 %{_mandir}/man1/*
 
 %changelog
+* Mon Jan 20 2020 openEuler Buildteam <buildteam@openeuler.org> - 0.67.0-5
+- Type:bugfix
+- Id:NA
+- SUG:NA
+- DESC:fix cves
+
 * Mon Jan 20 2020 openEuler Buildteam <buildteam@openeuler.org> - 0.67.0-4
 - Type:cve
 - Id:NA