Alerts This Week
Warning Icon 1 1,039
Alerts This Week
Warning Icon 1 1,039

Mageia Releases Update to Fix Critical Heap Buffer Overflow in Podofo

mageia
Calendar Grey June 24, 2026
Dist Mageia Esm H88
Podofo security update for Mageia fixes critical heap buffer overflow issues found in previous versions. Protect your system now!
Security update

Summary

Description: Podofo v0.9.8 shares some of the vulnerable code that was discovered in Podofo v0.10.0. This package fixes that. CVE-2023-31567 Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3. CVE-2023-31568 Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4.

References

- https://bugs.mageia.org/show_bug.cgi?id=33207

- https://github.com/podofo/podofo/commit/8f514d69b4ac3c9aa9f725fa93486fe4b7876642

- https://lwn.net/Articles/980540/

- https://github.com/podofo/podofo/issues/71

- https://github.com/podofo/podofo/issues/72

- https://www.cve.org/CVERecord?id=CVE-2023-31567

- https://www.cve.org/CVERecord?id=CVE-2023-31568

Topics%20covered

Topics Covered

security advisory critical DoS heap buffer overflow Mageia podofo

Resolution

SRPMS

- 9/core/podofo-0.9.8-2.1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 24 Jun 2026
URL: https://advisories.mageia.org/MGASA-2026-0229.html
Type: security
CVE: CVE-2023-31567, CVE-2023-31568

Topics%20covered

Topics Covered

security advisory critical DoS heap buffer overflow Mageia podofo

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here