Security update for djvulibre
This update for djvulibre fixes the following issues:
- CVE-2021-32490 [bsc#1185895]: Out of bounds write in function DJVU:filter_bv() via crafted djvu file
- CVE-2021-32491 [bsc#1185900]: Integer overflow in function render() in tools/ddjvu via crafted djvu file
- CVE-2021-32492 [bsc#1185904]: Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
- CVE-2021-32493 [bsc#1185905]: Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
This update was imported from the SUSE:SLE-15-SP2:Update update project.
-
Submitted by
Petr Gajdos (pgajdos)
Fixed bugs
bnc#1185905
VUL-0: CVE-2021-32493: djvulibre: Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
bnc#1185895
VUL-0: CVE-2021-32490: djvulibre: Out of bounds write in function DJVU:filter_bv() via crafted djvu file
bnc#1185904
VUL-0: CVE-2021-32492: djvulibre: Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
bnc#1185900
VUL-0: CVE-2021-32491: djvulibre: Integer overflow in function render() in tools/ddjvu via crafted djvu file
