FEDORA-2021-81e58c86b2 — security update for mingw-djvulibre

obsolete

FEDORA-2021-81e58c86b2 created by smani 3 years ago for Fedora 33

Apply fix for CVE-2021-32490, CVE-2021-32491, CVE-2021-32492, CVE-2021-32493

This update has been submitted for testing by smani.

This update's test gating status has been changed to 'ignored'.

This update's test gating status has been changed to 'waiting'.

This update's test gating status has been changed to 'ignored'.

This update has been pushed to testing.

This update has been obsoleted by mingw-djvulibre-3.5.27-12.fc33.

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 years ago

in testing

3 years ago

BZ#1958172 CVE-2021-32490 mingw-djvulibre: djvulibre: Out of bounds write in function DJVU::filter_bv() via crafted djvu file [fedora-all]

BZ#1958176 CVE-2021-32491 mingw-djvulibre: djvulibre: Integer overflow in function render() in tools/ddjvu via crafted djvu file [fedora-all]

BZ#1958178 CVE-2021-32492 mingw-djvulibre: djvulibre: Out of bounds read in function DJVU::DataPool::has_data() via crafted djvu file [fedora-all]

BZ#1958180 CVE-2021-32493 mingw-djvulibre: djvulibre: Heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file [fedora-all]

mingw-djvulibre-3.5.27-11.fc33

ignored