shield Security update for podofo

SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3550

This update for podofo fixes the following issues: - CVE-2015-8981: Fixed heap overflow in the function ReadXRefSubsection (bsc#1023190) - CVE-2017-6840: Fixed invalid memory read in ColorChanger::GetColorFromStack (colorchanger.cpp) (bsc#1027787) - CVE-2017-6841: Fixed NULL pointer dereference in GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement (graphicsstack.h) (bsc#1027786) - CVE-2017-6842: Fixed NULL pointer dereference in ColorChanger::GetColorFromStack (colorchanger.cpp) (bsc#1027785) - CVE-2017-6845: Fixed NULL pointer dereference in GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace (graphicsstack.h) (bsc#1027779) - CVE-2017-6849: Fixed NULL pointer dereference in PoDoFo::PdfColorGray::~PdfColorGray (PdfColor.cpp) (bsc#1027776) - CVE-2017-8378: Fixed denial of service (application crash) vectors related to m_offsets.size (PdfParser::ReadObjects func in base/PdfParser.cpp) (bsc#1037000) - Fixed NULL pointer dereference in PdfInfo::GuessFormat (pdfinfo.cpp) (bsc#1023072)

• Release Date
  Oct 8 2024
• References
  Bugzilla: 1027776, 1027785, 1027779, 1075322, 1037000, 1027787, 1023190, 1023072, 1084894, 1027786
  CVEs: CVE-2017-6849, CVE-2017-6845, CVE-2017-8378, CVE-2017-6841, CVE-2015-8981, CVE-2018-8001, CVE-2017-6840, CVE-2017-6842, CVE-2018-5309
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Package Hub 15.6 ppc64le

• Packages
  libpodofo-devel
  Development files for podofo

  0.9.6-150300.3.15.1 lock rpm

  libpodofo0_9_6
  PDF parsing and creation library

  0.9.6-150300.3.15.1 lock rpm

  podofo
  Tools to work with PDF files

  0.9.6-150300.3.15.1 lock rpm lock src

SUSE Package Hub 15.6 x86_64

• Packages
  libpodofo-devel
  Development files for podofo

  0.9.6-150300.3.15.1 lock rpm

  libpodofo0_9_6
  PDF parsing and creation library

  0.9.6-150300.3.15.1 lock rpm

  podofo
  Tools to work with PDF files

  0.9.6-150300.3.15.1 lock rpm lock src

SUSE Package Hub 15.6 aarch64

• Packages
  libpodofo-devel
  Development files for podofo

  0.9.6-150300.3.15.1 lock rpm

  libpodofo0_9_6
  PDF parsing and creation library

  0.9.6-150300.3.15.1 lock rpm

  podofo
  Tools to work with PDF files

  0.9.6-150300.3.15.1 lock rpm lock src

SUSE Package Hub 15.6 s390x

• Packages
  libpodofo-devel
  Development files for podofo

  0.9.6-150300.3.15.1 lock rpm

  libpodofo0_9_6
  PDF parsing and creation library

  0.9.6-150300.3.15.1 lock rpm

  podofo
  Tools to work with PDF files

  0.9.6-150300.3.15.1 lock rpm lock src