OPENSUSE-SU-2024:12946-1 djvulibre-3.5.28-5.1 on GA media

These are all security issues fixed in the djvulibre-3.5.28-5.1 package on the GA media of openSUSE Tumbleweed...

Advisory ROSA-SA-2024-2428

software: djvulibre 3.5.28 WASP: ROSA-CHROME packageevrstring: djvulibre-3.5.28-4 CVE-ID: CVE-2021-3500 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A flaw was discovered in djvulibre. A stack overflow in DJVU::DjVuDocument::getdjvufile via a created djvu file may cause the application to crash and...

Fedora: Security Advisory (FEDORA-2024-891c09df97)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-d20163632f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for djvulibre (FEDORA-2024-e8b9bedd36)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2024-0183)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated djvulibre packages fix security vulnerabilities

An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero...

Fedora 40 : djvulibre (2024-d20163632f)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d20163632f advisory. Security fix for CVE-2021-46310 and CVE-2021-46312. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 38 : djvulibre (2024-e8b9bedd36)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e8b9bedd36 advisory. Security fix for CVE-2021-46310 and CVE-2021-46312. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 39 : djvulibre (2024-891c09df97)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-891c09df97 advisory. Security fix for CVE-2021-46310 and CVE-2021-46312. Tenable has extracted the preceding description block directly from the Fedora security advisory...

openSUSE: Security Advisory for djvulibre (SUSE-SU-2023:3520-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Medium: djvulibre

Issue Overview: An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero. CVE-2021-46312 Affected Packages: djvulibre Note: This advisory is applicable to Amazon Linux 2 - Mate-desktop1.x Extra. Visit this page to learn mo...

Amazon Linux 2 : djvulibre (ALASMATE-DESKTOP1.X-2024-005)

The version of djvulibre installed on the remote host is prior to 3.5.27-30. It is, therefore, affected by a vulnerability as referenced in the ALAS2MATE-DESKTOP1.X-2024-005 advisory. An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service...

Amazon Linux 2 : djvulibre (ALASMATE-DESKTOP1.X-2023-003)

The version of djvulibre installed on the remote host is prior to 3.5.27-30. It is, therefore, affected by a vulnerability as referenced in the ALAS2MATE-DESKTOP1.X-2023-003 advisory. An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via...

Medium: djvulibre

Issue Overview: An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero. CVE-2021-46310 Affected Packages: djvulibre Note: This advisory is applicable to Amazon Linux 2 - Mate-desktop1.x Extra. Visit this page to learn more abo...

Amazon Linux 2 : djvulibre (ALASMATE-DESKTOP1.X-2023-002)

The version of djvulibre installed on the remote host is prior to 3.5.27-28. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2MATE-DESKTOP1.X-2023-002 advisory. A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv via...

Amazon Linux 2 : djvulibre (ALASMATE-DESKTOP1.X-2023-001)

The version of djvulibre installed on the remote host is prior to 3.5.27-30. It is, therefore, affected by a vulnerability as referenced in the ALAS2MATE-DESKTOP1.X-2023-001 advisory. An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode in DjVuText.cpp via a crafte...

SUSE SLES12 Security Update : djvulibre (SUSE-SU-2023:3755-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3755-1 advisory. - CVE-2021-46310: Fixed divide by zero in IW44Image.cpp bsc1214670. - CVE-2021-46312: Fixed divide by zero in IW44EncodeCodec.cpp...

SUSE: Security Advisory (SUSE-SU-2023:3755-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:3755-1 Security update for djvulibre

This update for djvulibre fixes the following issues: - CVE-2021-46310: Fixed divide by zero in IW44Image.cpp bsc1214670. - CVE-2021-46312: Fixed divide by zero in IW44EncodeCodec.cpp bsc1214672. - CVE-2021-32490: Fixed out of bounds write in function DJVU:filterbv via crafted djvu file bsc118589...