shield Security update for djvulibre

SUSE-SLE-SERVER-12-SP4-2019-2444

This update for djvulibre fixes the following issues: Security issues fixed: - CVE-2019-15142: Fixed heap-based buffer over-read (bsc#1146702). - CVE-2019-15143: Fixed resource exhaustion caused by corrupted image files (bsc#1146569). - CVE-2019-15144: Fixed denial-of-service caused by crafted PBM image files (bsc#1146571). - CVE-2019-15145: Fixed out-of-bounds read caused by corrupted JB2 image files (bsc#1146572). - Fixed segfault when libtiff encounters corrupted TIFF (upstream issue #295).

• Release Date
  Sep 24 2019
• References
  Bugzilla: 1146571, 1146702, 1146569, 1146572
  CVEs: CVE-2019-15143, CVE-2019-15145, CVE-2019-15144, CVE-2019-15142
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  djvulibre
  An Open Source Implementation of DjVu

  3.5.25.3-5.3.1

  lock src

  libdjvulibre21
  Libraries of Open Source Implementation of DjVu - djvulibre

  3.5.25.3-5.3.1

  lock rpm

SUSE Linux Enterprise Server 12.4 s390x

• Packages
  djvulibre
  An Open Source Implementation of DjVu

  3.5.25.3-5.3.1

  lock src

  libdjvulibre21
  Libraries of Open Source Implementation of DjVu - djvulibre

  3.5.25.3-5.3.1

  lock rpm

SUSE Linux Enterprise Server 12.4 x86_64

• Packages
  djvulibre
  An Open Source Implementation of DjVu

  3.5.25.3-5.3.1

  lock src

  libdjvulibre21
  Libraries of Open Source Implementation of DjVu - djvulibre

  3.5.25.3-5.3.1

  lock rpm

SUSE Linux Enterprise Server 12.4 aarch64

• Packages
  djvulibre
  An Open Source Implementation of DjVu

  3.5.25.3-5.3.1

  lock src

  libdjvulibre21
  Libraries of Open Source Implementation of DjVu - djvulibre

  3.5.25.3-5.3.1

  lock rpm