Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia: 2019-0422 Moderate: xpdf NULL Pointer Dereference Issue

mageia
Calendar Grey December 31, 2019
Dist Mageia Esm H88
Revised xpdf bundles for Mageia 7 address a critical security vulnerability affecting app performance and dependability.
The updated packages fix a security vulnerability: Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constru...

Summary

The updated packages fix a security vulnerability:
Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor. (CVE-2019-17064)

References

- https://bugs.mageia.org/show_bug.cgi?id=25973

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/TMDB2CGUYDW2RENE2I2TT6QNFEEI2CNF/

- https://www.cve.org/CVERecord?id=CVE-2019-17064

Topics%20covered

Topics Covered

security advisory moderate security issue update NULL pointer xpdf mageia

Resolution

SRPMS

- 7/core/xpdf-4.02-1.1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 31 Dec 2019
URL: https://advisories.mageia.org/MGASA-2019-0422.html
Type: security
CVE: CVE-2019-17064

Topics%20covered

Topics Covered

security advisory moderate security issue update NULL pointer xpdf mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here