File _patchinfo of Package patchinfo.19589
<patchinfo incident="19589"> <issue tracker="cve" id="2021-32492"/> <issue tracker="cve" id="2019-18804"/> <issue tracker="cve" id="2021-32491"/> <issue tracker="cve" id="2021-32493"/> <issue tracker="bnc" id="1185900">VUL-0: CVE-2021-32491: djvulibre: Integer overflow in function render() in tools/ddjvu via crafted djvu file</issue> <issue tracker="bnc" id="1185905">VUL-0: CVE-2021-32493: djvulibre: Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file</issue> <issue tracker="bnc" id="1185904">VUL-0: CVE-2021-32492: djvulibre: Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file</issue> <packager>pgajdos</packager> <rating>important</rating> <category>security</category> <summary>Security update for djvulibre</summary> <description>This update for djvulibre fixes the following issues: Security issues fixed: - CVE-2021-32491 [bsc#1185900]: Integer overflow in function render() in tools/ddjvu via crafted djvu file - CVE-2021-32492 [bsc#1185904]: Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file - CVE-2021-32493 [bsc#1185905]: Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file </description> </patchinfo>