Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 39: FEDORA-2024-891c09df97 Critical: Djvulibre Buffer Overflow

fedora
Calendar Grey May 16, 2024
Dist Fedora Esm H88
Essential security patches for djvulibre targeting flaws in Fedora 39. Remediates CVE-2021-46310 and CVE-2021-46312.
Security fix for CVE-2021-46310 and CVE-2021-46312.

Summary

DjVu is a web-centric format and software platform for distributing documents

and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for

distributing scanned documents, digital documents, or high-resolution pictures.

DjVu content downloads faster, displays and renders faster, looks nicer on a

screen, and consume less client resources than competing formats. DjVu images

display instantly and can be smoothly zoomed and panned with no lengthy

re-rendering.

DjVuLibre is a free (GPL'ed) implementation of DjVu, including viewers,

decoders, simple encoders, and utilities. The browser plugin is in its own

separate sub-package.

Update Information:

Security fix for CVE-2021-46310 and CVE-2021-46312.

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical security fix djvulibre CVE-2021-46312

Change Log

* Tue May 7 2024 Marek Kasik - 3.5.28-7 - Check for zero-size image when allocating GBuffer - Resolves: #2234738 * Tue May 7 2024 Marek Kasik - 3.5.28-6 - Improve image size fix - Resolves: #2234741

References


[ 1 ] Bug #2234736 - CVE-2021-46312 djvulibre: divide by zero in IW44EncodeCodec.cpp https://bugzilla.redhat.com/show_bug.cgi?id=2234736 [ 2 ] Bug #2234739 - CVE-2021-46310 djvulibre: divide by zero in IW44Image.cpp https://bugzilla.redhat.com/show_bug.cgi?id=2234739

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-891c09df97' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: djvulibre
Product: Fedora 39
Version: 3.5.28
Release: 7.fc39
URL:
Summary: DjVu viewers, encoders, and utilities

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical security fix djvulibre CVE-2021-46312

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here