Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:1112-1

Опубликовано: 09 авг. 2021
Источник: suse-cvrf

Описание

Security update for djvulibre

This update for djvulibre fixes the following issues:

  • CVE-2021-3630: out-of-bounds write in DJVU:DjVuTXT:decode() in DjVuText.cpp (bsc#1187869)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Список пакетов

openSUSE Leap 15.2
djvulibre-3.5.27-lp152.7.9.1
djvulibre-doc-3.5.27-lp152.7.9.1
libdjvulibre-devel-3.5.27-lp152.7.9.1
libdjvulibre21-3.5.27-lp152.7.9.1

Ссылки

Описание

An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28.

Затронутые продукты
openSUSE Leap 15.2:djvulibre-3.5.27-lp152.7.9.1
openSUSE Leap 15.2:djvulibre-doc-3.5.27-lp152.7.9.1
openSUSE Leap 15.2:libdjvulibre-devel-3.5.27-lp152.7.9.1
openSUSE Leap 15.2:libdjvulibre21-3.5.27-lp152.7.9.1
Ссылки