FEDORA-2019-f923712bab — security update for mingw-djvulibre

stable

mingw-djvulibre-3.5.27-7.fc30

FEDORA-2019-f923712bab created by smani 5 years ago for Fedora 30

This update backports fixes for CVE-2019-15142, CVE-2019-15143, CVE-2019-15144, CVE-2019-15145, CVE-2019-18804

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-f923712bab

This update has been submitted for testing by smani.

5 years ago

This update's test gating status has been changed to 'waiting'.

5 years ago

This update's test gating status has been changed to 'ignored'.

5 years ago

This update has been pushed to testing.

5 years ago

This update can be pushed to stable now if the maintainer wishes

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

Builds

mingw-djvulibre-3.5.27-7.fc30

BZ#1767843 CVE-2019-15142 mingw-djvulibre: djvulibre: heap-based buffer overflow in GStringRep::strdup in libdjvu/GString.cpp [fedora-all]

BZ#1767858 CVE-2019-15143 mingw-djvulibre: djvulibre: infinite loop in GBitmap::read_rle_raw related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp [fedora-all]

BZ#1767869 CVE-2019-15144 mingw-djvulibre: djvulibre: recursive call to GArrayTemplate<Run>::sort in GContainer.h leads to stack overflow [fedora-all]

BZ#1767922 CVE-2019-15145 mingw-djvulibre: djvulibre: out-of-bounds read in JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h [fedora-all]

BZ#1771268 CVE-2019-18804 mingw-djvulibre: djvulibre: null pointer dereference in function DJVU::filter_fv in [fedora-all]

mingw-djvulibre-3.5.27-7.fc30

Automated Test Results

ignored