SUSE-SU-2019:1849-1

Dashboard / Vulnerabilities / SUSE-SU-2019:1849-1

SUSE-SU-2019:1849-1

Summary: Security update for podofo

Details: This update for podofo fixes the following issues: Security issues fixed: - CVE-2017-8054: Fixed a vulnerability in PdfPagesTree::GetPageNodeFromArray function which could allow remote attackers to cause Denial of Service (bsc#1035596). - CVE-2018-5783: Fixed an uncontrolled memory allocation in PdfVecObjects::Reserve function (bsc#1076962). - CVE-2018-11255: Fixed a null pointer dereference in PdfPage::GetPageNumber() function which could lead to Denial of Service (bsc#1096890). - CVE-2018-20751: Fixed a null pointer dereference in crop_page function (bsc#1124357). - CVE-2018-12982: Fixed an invalid memory read in PdfVariant::DelayedLoad() function which could allow remote attackers to cause Denial of Service (bsc#1099720). - Fixed a buffer overflow in TestEncrypt function. - Fixed a null pointer dereference in PdfTranslator-setTarget function. - Fixed a heap based buffer overflow PdfVariant:DelayedLoad function.

References: https://www.suse.com/support/update/announcement/2019/suse-su-20191849-1/, https://bugzilla.suse.com/1035596, https://bugzilla.suse.com/1076962, https://bugzilla.suse.com/1096890, https://bugzilla.suse.com/1099720, https://bugzilla.suse.com/1124357, https://www.suse.com/security/cve/CVE-2017-8054, https://www.suse.com/security/cve/CVE-2018-11255, https://www.suse.com/security/cve/CVE-2018-12982, https://www.suse.com/security/cve/CVE-2018-20751, https://www.suse.com/security/cve/CVE-2018-5783