< back to search

shield Security update for podofo
SUSE-SLE-SDK-12-SP4-2019-393

This update for podofo fixes the following issues: These security issues were fixed: - CVE-2017-6845: The PoDoFo::PdfColor::operator function allowed remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file (bsc#1027779). - CVE-2018-5308: Properly validate memcpy arguments in the PdfMemoryOutputStream::Write function to prevent remote attackers from causing a denial-of-service or possibly have unspecified other impact via a crafted pdf file (bsc#1075772) - CVE-2018-5295: Prevent integer overflow in the PdfXRefStreamParserObject::ParseStream function that allowed remote attackers to cause a denial-of-service via a crafted pdf file (bsc#1075026). - CVE-2017-6845: The PoDoFo::PdfColor::operator function allowed remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file (bsc#1027779). - CVE-2018-5309: Prevent integer overflow in the PdfObjectStreamParserObject::ReadObjectsFromStream function that allowed remote attackers to cause a denial-of-service via a crafted pdf file (bsc#1075322). - CVE-2018-5296: Prevent uncontrolled memory allocation in the PdfParser::ReadXRefSubsection function that allowed remote attackers to cause a denial-of-service via a crafted pdf file (bsc#1075021). - CVE-2017-7381: Prevent NULL pointer dereference that allowed remote attackers to cause a denial of service via a crafted PDF document (bsc#1032020). - CVE-2017-7382: Prevent NULL pointer dereference that allowed remote attackers to cause a denial of service via a crafted PDF document (bsc#1032021). - CVE-2017-7383: Prevent NULL pointer dereference that allowed remote attackers to cause a denial of service via a crafted PDF document (bsc#1032022). - CVE-2018-11256: Prevent NULL pointer dereference that allowed remote attackers to cause a denial of service via a crafted PDF document (bsc#1096889). - CVE-2018-5783: Prevent uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function that allowed remote attackers to cause a denial of service via a crafted pdf file (bsc#1076962). These non-security issues were fixed: - Prevent regression caused by the fix for CVE-2017-8054. - Prevent NULL dereferences when "Kids" array is missing (bsc#1096890) - Added to detect cycles and recursions in XRef tables

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.4 aarch64
  • Packages
    libpodofo-devel
    Development files for podofo
    0.9.2-3.6.3
    lock rpm
    podofo
    Tools to work with PDF files
    0.9.2-3.6.3
    lock src
SUSE Linux Enterprise Software Development Kit 12.4 ppc64le
  • Packages
    libpodofo-devel
    Development files for podofo
    0.9.2-3.6.3
    lock rpm
    podofo
    Tools to work with PDF files
    0.9.2-3.6.3
    lock src
SUSE Linux Enterprise Software Development Kit 12.4 s390x
  • Packages
    libpodofo-devel
    Development files for podofo
    0.9.2-3.6.3
    lock rpm
    podofo
    Tools to work with PDF files
    0.9.2-3.6.3
    lock src
SUSE Linux Enterprise Software Development Kit 12.4 x86_64
  • Packages
    libpodofo-devel
    Development files for podofo
    0.9.2-3.6.3
    lock rpm
    podofo
    Tools to work with PDF files
    0.9.2-3.6.3
    lock src