Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 569
Alerts This Week
Warning Icon 1 569

Fedora 24 Moderate: Multiple Vulnerabilities in Zathura PDF Plugin

fedora
Calendar Grey November 24, 2016
Scroller Fedora
Important patch release for the Zathura PDF extension correcting several security flaws. Update immediately to maintain protection.
Security fix for CVE-2016-7504, CVE-2016-7505, CVE-2016-7506, CVE-2016-9017, CVE-2016-9108, CVE-2016-9109, CVE-2016-9294

Summary

This plugin adds PDF support to zathura using the mupdf rendering engine.

Update Information:

Security fix for CVE-2016-7504, CVE-2016-7505, CVE-2016-7506, CVE-2016-9017, CVE-2016-9108, CVE-2016-9109, CVE-2016-9294

Topics%20covered

Topics Covered

security advisory security issue Fedora DoS MuPDF Zathura

Change Log

References


[ 1 ] Bug #1394714 - CVE-2016-9294 mujs: DoS by using the malformed labeled break/continue in JavaScript https://bugzilla.redhat.com/show_bug.cgi?id=1394714 [ 2 ] Bug #1390266 - CVE-2016-7504 CVE-2016-7505 CVE-2016-7506 CVE-2016-9017 CVE-2016-9108 CVE-2016-9109 mujs: Multiple security issues https://bugzilla.redhat.com/show_bug.cgi?id=1390266

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade zathura-pdf-mupdf' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
important
Lowest
Low
Medium
High
Critical

Name: zathura-pdf-mupdf
Product: Fedora 24
Version: 0.3.0
Release: 3.fc24
URL: Summary : PDF support for zathura via mupdf

Topics%20covered

Topics Covered

security advisory security issue Fedora DoS MuPDF Zathura

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.