SUSE-SU-2024:3550-1

Dashboard / Vulnerabilities / SUSE-SU-2024:3550-1

SUSE-SU-2024:3550-1

Summary: Security update for podofo

Details: This update for podofo fixes the following issues: - CVE-2015-8981: Fixed heap overflow in the function ReadXRefSubsection (bsc#1023190) - CVE-2017-6840: Fixed invalid memory read in ColorChanger::GetColorFromStack (colorchanger.cpp) (bsc#1027787) - CVE-2017-6841: Fixed NULL pointer dereference in GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement (graphicsstack.h) (bsc#1027786) - CVE-2017-6842: Fixed NULL pointer dereference in ColorChanger::GetColorFromStack (colorchanger.cpp) (bsc#1027785) - CVE-2017-6845: Fixed NULL pointer dereference in GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace (graphicsstack.h) (bsc#1027779) - CVE-2017-6849: Fixed NULL pointer dereference in PoDoFo::PdfColorGray::~PdfColorGray (PdfColor.cpp) (bsc#1027776) - CVE-2017-8378: Fixed denial of service (application crash) vectors related to m_offsets.size (PdfParser::ReadObjects func in base/PdfParser.cpp) (bsc#1037000) - Fixed NULL pointer dereference in PdfInfo::GuessFormat (pdfinfo.cpp) (bsc#1023072)

References: https://www.suse.com/support/update/announcement/2024/suse-su-20243550-1/, https://bugzilla.suse.com/1023072, https://bugzilla.suse.com/1023190, https://bugzilla.suse.com/1027776, https://bugzilla.suse.com/1027779, https://bugzilla.suse.com/1027785, https://bugzilla.suse.com/1027786, https://bugzilla.suse.com/1027787, https://bugzilla.suse.com/1037000, https://bugzilla.suse.com/1075322, https://bugzilla.suse.com/1084894, https://www.suse.com/security/cve/CVE-2015-8981, https://www.suse.com/security/cve/CVE-2017-6840, https://www.suse.com/security/cve/CVE-2017-6841, https://www.suse.com/security/cve/CVE-2017-6842, https://www.suse.com/security/cve/CVE-2017-6845, https://www.suse.com/security/cve/CVE-2017-6849, https://www.suse.com/security/cve/CVE-2017-8378, https://www.suse.com/security/cve/CVE-2018-5309, https://www.suse.com/security/cve/CVE-2018-8001