Описание
Security update for apache-pdfbox
This update for apache-pdfbox fixes the following issues:
Security issue fixed:
- CVE-2018-8036: Fix infinite loop while parsing files that leads to an out of memory issue (bsc#1099721).
Список пакетов
SUSE Linux Enterprise Module for Development Tools 15
apache-pdfbox-1.8.12-5.3.13
Ссылки
- Link for SUSE-SU-2018:2630-1
- E-Mail link for SUSE-SU-2018:2630-1
- SUSE Security Ratings
- SUSE Bug 1099721
- SUSE CVE CVE-2018-8036 page
Описание
In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser.
Затронутые продукты
SUSE Linux Enterprise Module for Development Tools 15:apache-pdfbox-1.8.12-5.3.13
Ссылки
- CVE-2018-8036
- SUSE Bug 1099721