Описание
Security update for apache-pdfbox
This update for apache-pdfbox fixes the following issues:
Security issue fixed:
- CVE-2018-8036: Fix infinite loop while parsing files that leads to an out of memory issue (bsc#1099721).
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.0
apache-pdfbox-1.8.12-lp150.4.3.1
apache-pdfbox-javadoc-1.8.12-lp150.4.3.1
Ссылки
- E-Mail link for openSUSE-SU-2018:2645-1
- SUSE Security Ratings
Описание
In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser.
Затронутые продукты
openSUSE Leap 15.0:apache-pdfbox-1.8.12-lp150.4.3.1
openSUSE Leap 15.0:apache-pdfbox-javadoc-1.8.12-lp150.4.3.1
Ссылки
- CVE-2018-8036
- SUSE Bug 1099721