Stay Secure with the Latest Linux Advisories

security advisorycriticalFedora

Fedora 33: 2021-8b17a2725e Critical: Pdfbox OutOfMemory and Loop Issues

Security fix for CVE-2021-27807 and CVE-2021-27906. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-8b17a2725e 2021-03-30 14:30:27.146307 --------------------------------------------------------------------------------Name : pdfbox Product : Fedora 33 Version : 2.0.23 Release : 1.fc33 URL : https://pdfbox.apache.org/ Summary : Apache PDFBox library for working with PDF documents Description : Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is published under the Apache License v2.0. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2021-27807 and CVE-2021-27906 --------------------------------------------------------------------------------ChangeLog: * Fri Mar 19 2021 Fedora Release Monitoring - 2.0.23-1 - Update to 2.0.23 (#1940796) --------------------------------------------------------------------------------References: [ 1 ] Bug #1941050 - CVE-2021-27906 pdfbox: OutOfMemory-Exception while loading a crafted PDF file https://bugzilla.redhat.com/show_bug.cgi?id=1941050 [ 2 ] Bug #1941055 - CVE-2021-27807 pdfbox: infinite loop while loading a crafted PDF file https://bugzilla.redhat.com/show_bug.cgi?id=1941055 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-8b17a2725e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by theFedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Essential patches for Fedora 33 tackling vulnerabilities in pdfbox, improving document reliability and speed.. Fedora 33 Pdfbox Update, Pdfbox Security Fix, Apache Pdfbox Update. . Severity: Critical. LinuxSecurity.com Team

Mar 30, 2021 •Critical Fedora