Stack overflow in function DJVU::DjVuDocument::get_djvu_file() via crafted djvu file. (CVE-2021-3500). Out of bounds write in function DJVU::filter_bv() via crafted djvu file. (CVE-2021-32490). . MGASA-2021-0247 - Updated djvulibre packages fix security vulnerabilities Publication date: 13 Jun 2021 URL: https://advisories.mageia.org/MGASA-2021-0247.html Type: security Affected Mageia releases: 7, 8 CVE: CVE-2021-3500, CVE-2021-32490, CVE-2021-32491, CVE-2021-32492, CVE-2021-32493 Stack overflow in function DJVU::DjVuDocument::get_djvu_file() via crafted djvu file. (CVE-2021-3500). Out of bounds write in function DJVU::filter_bv() via crafted djvu file. (CVE-2021-32490). Integer overflow in function render() in tools/ddjvu via crafted djvu file. (CVE-2021-32491) Out of bounds read in function DJVU::DataPool::has_data() via crafted djvu file. (CVE-2021-32492). Heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file. (CVE-2021-32493). References: - https://bugs.mageia.org/show_bug.cgi?id=29000 - https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html - https://ubuntu.com/security/notices/USN-4957-1 - https://lists.fedoraproject.org/archives/list/
Get the latest Linux and open source security news straight to your inbox.