File _patchinfo of Package patchinfo.19588

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.19588

<patchinfo incident="19588">
  <issue tracker="cve" id="2021-32490"/>
  <issue tracker="cve" id="2021-32492"/>
  <issue tracker="cve" id="2021-32493"/>
  <issue tracker="cve" id="2021-32491"/>
  <issue tracker="bnc" id="1185895">VUL-0: CVE-2021-32490: djvulibre: Out of bounds write in function DJVU:filter_bv()  via crafted djvu file</issue>
  <issue tracker="bnc" id="1185904">VUL-0: CVE-2021-32492: djvulibre: Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file</issue>
  <issue tracker="bnc" id="1185900">VUL-0: CVE-2021-32491: djvulibre: Integer overflow in function render() in tools/ddjvu via crafted djvu file</issue>
  <issue tracker="bnc" id="1185905">VUL-0: CVE-2021-32493: djvulibre: Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file</issue>
  <packager>pgajdos</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for djvulibre</summary>
  <description>This update for djvulibre fixes the following issues:

Security issues fixed:

- CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
- CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
- CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
- CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.19588

Places