FEDORA-EPEL-2018-e3b98be78a — security update for qpdf

stable

qpdf-5.1.1-6.el6

FEDORA-EPEL-2018-e3b98be78a created by zdohnal 6 years ago for Fedora EPEL 6

Security fix for CVE-2017-11625, CVE-2017-11624, CVE-2017-12595, CVE-2018-9918.

This update has been submitted for testing by zdohnal.

6 years ago

This update has been pushed to testing.

6 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

This update has been submitted for batched by zdohnal.

6 years ago

This update has been submitted for stable by zdohnal.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

qpdf-5.1.1-6.el6

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

BZ#1475507 CVE-2017-11624 qpdf: Infinite loop in QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc

BZ#1475508 CVE-2017-11624 qpdf: Infinite loop in QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc [epel-6]

BZ#1475510 CVE-2017-11625 qpdf: Infinite loop in QPDF::resolveObjectsInStream function in QPDF.cc

BZ#1475511 CVE-2017-11625 qpdf: Infinite loop in QPDF::resolveObjectsInStream function in QPDF.cc [epel-6]

BZ#1485847 CVE-2017-12595 qpdf: Stack overflow when processing deeply nested arrays and dictionaries

BZ#1485850 CVE-2017-12595 qpdf: Stack overflow when processing deeply nested arrays and dictionaries [epel-6]

BZ#1566756 CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary classes in libqpdf.a

BZ#1566758 CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary classes in libqpdf.a [epel-6]

qpdf-5.1.1-6.el6

Automated Test Results

ignored