shield
Security update for podofo
SUSE-SLE-SDK-12-SP4-2019-1849
This update for podofo fixes the following issues: Security issues fixed: - CVE-2017-8054: Fixed a vulnerability in PdfPagesTree::GetPageNodeFromArray function which could allow remote attackers to cause Denial of Service (bsc#1035596). - CVE-2018-5783: Fixed an uncontrolled memory allocation in PdfVecObjects::Reserve function (bsc#1076962). - CVE-2018-11255: Fixed a null pointer dereference in PdfPage::GetPageNumber() function which could lead to Denial of Service (bsc#1096890). - CVE-2018-20751: Fixed a null pointer dereference in crop_page function (bsc#1124357). - CVE-2018-12982: Fixed an invalid memory read in PdfVariant::DelayedLoad() function which could allow remote attackers to cause Denial of Service (bsc#1099720). - Fixed a buffer overflow in TestEncrypt function. - Fixed a null pointer dereference in PdfTranslator-setTarget function. - Fixed a heap based buffer overflow PdfVariant:DelayedLoad function.
-
Release DateJul 15 2019
-
ReferencesBugzilla: 1096890, 1076962, 1124357, 1099720, 1035596
CVEs: CVE-2018-12982, CVE-2018-5783, CVE-2018-20751, CVE-2017-8054, CVE-2018-11255 -
Typesecurity
-
Severitymoderate
cloud_download Downloads
SUSE Linux Enterprise Software Development Kit 12.4 ppc64le
-
Packageslibpodofo-devel
Development files for podofopodofo0.9.2-3.9.2lock rpm
Tools to work with PDF files0.9.2-3.9.2lock src
SUSE Linux Enterprise Software Development Kit 12.4 aarch64
-
Packageslibpodofo-devel
Development files for podofopodofo0.9.2-3.9.2lock rpm
Tools to work with PDF files0.9.2-3.9.2lock src
SUSE Linux Enterprise Software Development Kit 12.4 x86_64
-
Packageslibpodofo-devel
Development files for podofopodofo0.9.2-3.9.2lock rpm
Tools to work with PDF files0.9.2-3.9.2lock src
SUSE Linux Enterprise Software Development Kit 12.4 s390x
-
Packageslibpodofo-devel
Development files for podofopodofo0.9.2-3.9.2lock rpm
Tools to work with PDF files0.9.2-3.9.2lock src