Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Mageia: 2019-0355 Critical Update For Evince Memory Corruption

mageia
Calendar Grey December 6, 2019
Dist Mageia Esm H88
Mageia 2019-0355 enhances Evince to resolve a memory-related vulnerability during TIFF handling. Discover more about this correction.
The updated packages fix a security vulnerability: The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32...

Summary

The updated packages fix a security vulnerability:
The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files. (CVE-2019-11459)

References

- https://bugs.mageia.org/show_bug.cgi?id=25264

- https://ubuntu.com/security/notices/USN-3959-1

- https://access.redhat.com/errata/RHSA-2019:3553

- https://www.cve.org/CVERecord?id=CVE-2019-11459

Topics%20covered

Topics Covered

security advisory security update memory corruption Mageia GNOME Evince

Resolution

SRPMS

- 7/core/evince-3.32.1-1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 06 Dec 2019
URL: https://advisories.mageia.org/MGASA-2019-0355.html
Type: security
CVE: CVE-2019-11459

Topics%20covered

Topics Covered

security advisory security update memory corruption Mageia GNOME Evince

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here