Stay Secure with the Latest Linux Advisories

security advisorycode executiondebian

Debian: DSA-5032-1 Critical: Djvulibre Document Crash and Code Execution

Several vulnerabilities were discovered in djvulibre, a library and set of tools to handle documents in the DjVu format. An attacker could crash document viewers and possibly execute arbitrary code through . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5032-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Florian Weimer December 28, 2021 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : djvulibre CVE ID : CVE-2019-15142 CVE-2019-15143 CVE-2019-15144 CVE-2019-15145 CVE-2019-18804 CVE-2021-3500 CVE-2021-3630 CVE-2021-32490 CVE-2021-32491 CVE-2021-32492 CVE-2021-32493 Debian Bug : 945114 988215 Several vulnerabilities were discovered in djvulibre, a library and set of tools to handle documents in the DjVu format. An attacker could crash document viewers and possibly execute arbitrary code through crafted DjVu files. For the oldstable distribution (buster), these problems have been fixed in version 3.5.27.1-10+deb10u1. For the stable distribution (bullseye), these problems have been fixed in version 3.5.28-2. We recommend that you upgrade your djvulibre packages. For the detailed security status of djvulibre please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/djvulibre Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Important security patch for djvulibre resolves various vulnerabilities that could allow code execution via specially designed files.. djvulibre security, Debian update, security tools, document handling vulnerabilities. . Severity: Critical.LinuxSecurity.com Team

Dec 28, 2021 •Critical Debian