Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

Fedora 23: FEDORA-2016-2edfd75312 Critical: zathura pdf-mupdf DoS Risk

fedora
Calendar Grey December 1, 2016
Scroller Fedora
Fedora 23 patch addressing severe vulnerabilities in zathura-pdf-mupdf concerning various security loopholes and efficiency enhancements.
Security fix for CVE-2016-7504, CVE-2016-7505, CVE-2016-7506, CVE-2016-9017, CVE-2016-9108, CVE-2016-9109, CVE-2016-9294

Summary

This plugin adds PDF support to zathura using the mupdf rendering engine.

Update Information:

Security fix for CVE-2016-7504, CVE-2016-7505, CVE-2016-7506, CVE-2016-9017, CVE-2016-9108, CVE-2016-9109, CVE-2016-9294

Topics%20covered

Topics Covered

security advisory critical software update Fedora DoS mupdf zathura

Change Log

References


[ 1 ] Bug #1394714 - CVE-2016-9294 mujs: DoS by using the malformed labeled break/continue in JavaScript https://bugzilla.redhat.com/show_bug.cgi?id=1394714 [ 2 ] Bug #1390266 - CVE-2016-7504 CVE-2016-7505 CVE-2016-7506 CVE-2016-9017 CVE-2016-9108 CVE-2016-9109 mujs: Multiple security issues https://bugzilla.redhat.com/show_bug.cgi?id=1390266

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade zathura-pdf-mupdf' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: zathura-pdf-mupdf
Product: Fedora 23
Version: 0.3.0
Release: 3.fc23
URL: Summary : PDF support for zathura via mupdf

Topics%20covered

Topics Covered

security advisory critical software update Fedora DoS mupdf zathura

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.