gpp_maybe Security update for djvulibre

SUSE-SLE-Module-Desktop-Applications-15-SP2-2021-1641

This update for djvulibre fixes the following issues: - CVE-2021-32490 [bsc#1185895]: Out of bounds write in function DJVU:filter_bv() via crafted djvu file - CVE-2021-32491 [bsc#1185900]: Integer overflow in function render() in tools/ddjvu via crafted djvu file - CVE-2021-32492 [bsc#1185904]: Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file - CVE-2021-32493 [bsc#1185905]: Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file

• Release Date
  May 19 2021
• References
  Bugzilla: 1185905, 1185895, 1185904, 1185900
  CVEs: CVE-2021-32490, CVE-2021-32492, CVE-2021-32491, CVE-2021-32493
• Type
  security
• Severity
  important

cloud_download Downloads

Desktop Applications Module 15.2 aarch64

• Packages
  djvulibre
  An Implementation of DjVu

  3.5.27-11.3.1 lock src

  libdjvulibre-devel
  Headers for djvulibre libraries

  3.5.27-11.3.1 lock rpm

  libdjvulibre21
  DjVu rendering library

  3.5.27-11.3.1 lock rpm

Desktop Applications Module 15.2 ppc64le

• Packages
  djvulibre
  An Implementation of DjVu

  3.5.27-11.3.1 lock src

  libdjvulibre-devel
  Headers for djvulibre libraries

  3.5.27-11.3.1 lock rpm

  libdjvulibre21
  DjVu rendering library

  3.5.27-11.3.1 lock rpm

Desktop Applications Module 15.2 x86_64

• Packages
  djvulibre
  An Implementation of DjVu

  3.5.27-11.3.1 lock src

  libdjvulibre-devel
  Headers for djvulibre libraries

  3.5.27-11.3.1 lock rpm

  libdjvulibre21
  DjVu rendering library

  3.5.27-11.3.1 lock rpm

Desktop Applications Module 15.2 s390x

• Packages
  djvulibre
  An Implementation of DjVu

  3.5.27-11.3.1 lock src

  libdjvulibre-devel
  Headers for djvulibre libraries

  3.5.27-11.3.1 lock rpm

  libdjvulibre21
  DjVu rendering library

  3.5.27-11.3.1 lock rpm