Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-18804 (GCVE-0-2019-18804)
Vulnerability from cvelistv5
Published
2019-11-07 05:25
Modified
2024-08-05 02:02
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T02:02:39.495Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://sourceforge.net/p/djvu/bugs/309/" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md" }, { "name": "[debian-lts-announce] 20191108 [SECURITY] [DLA 1985-1] djvulibre security update", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html" }, { "name": "USN-4198-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "https://usn.ubuntu.com/4198-1/" }, { "name": "FEDORA-2019-f923712bab", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/" }, { "name": "FEDORA-2019-6bc8be9d84", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/" }, { "name": "openSUSE-SU-2019:2574", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html" }, { "name": "openSUSE-SU-2019:2576", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html" }, { "name": "FEDORA-2019-18cf104b5d", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/" }, { "name": "FEDORA-2019-7fac263417", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/" }, { "name": "[debian-lts-announce] 20210526 [SECURITY] [DLA 2667-1] djvulibre security update", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html" }, { "name": "DSA-5032", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "https://www.debian.org/security/2021/dsa-5032" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "descriptions": [ { "lang": "en", "value": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2021-12-28T22:06:13", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://sourceforge.net/p/djvu/bugs/309/" }, { "tags": [ "x_refsource_MISC" ], "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md" }, { "name": "[debian-lts-announce] 20191108 [SECURITY] [DLA 1985-1] djvulibre security update", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html" }, { "name": "USN-4198-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "https://usn.ubuntu.com/4198-1/" }, { "name": "FEDORA-2019-f923712bab", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/" }, { "name": "FEDORA-2019-6bc8be9d84", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/" }, { "name": "openSUSE-SU-2019:2574", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html" }, { "name": "openSUSE-SU-2019:2576", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html" }, { "name": "FEDORA-2019-18cf104b5d", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/" }, { "name": "FEDORA-2019-7fac263417", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/" }, { "name": "[debian-lts-announce] 20210526 [SECURITY] [DLA 2667-1] djvulibre security update", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html" }, { "name": "DSA-5032", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "https://www.debian.org/security/2021/dsa-5032" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-18804", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://sourceforge.net/p/djvu/bugs/309/", "refsource": "MISC", "url": "https://sourceforge.net/p/djvu/bugs/309/" }, { "name": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md", "refsource": "MISC", "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md" }, { "name": "[debian-lts-announce] 20191108 [SECURITY] [DLA 1985-1] djvulibre security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html" }, { "name": "USN-4198-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/4198-1/" }, { "name": "FEDORA-2019-f923712bab", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/" }, { "name": "FEDORA-2019-6bc8be9d84", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/" }, { "name": "openSUSE-SU-2019:2574", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html" }, { "name": "openSUSE-SU-2019:2576", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html" }, { "name": "FEDORA-2019-18cf104b5d", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/" }, { "name": "FEDORA-2019-7fac263417", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/" }, { "name": "[debian-lts-announce] 20210526 [SECURITY] [DLA 2667-1] djvulibre security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html" }, { "name": "DSA-5032", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2021/dsa-5032" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2019-18804", "datePublished": "2019-11-07T05:25:46", "dateReserved": "2019-11-07T00:00:00", "dateUpdated": "2024-08-05T02:02:39.495Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2019-18804\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2019-11-07T06:15:10.653\",\"lastModified\":\"2024-11-21T04:33:36.020\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.\"},{\"lang\":\"es\",\"value\":\"DjVuLibre versi\u00f3n 3.5.27, presenta una desreferencia del puntero NULL en la funci\u00f3n DJVU::filter_fv en el archivo IW44EncodeCodec.cpp.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:djvulibre_project:djvulibre:3.5.27:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6174AF9B-0B0B-4602-A693-A775A541276B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80F0FA5D-8D3B-4C0E-81E2-87998286AF33\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD783B0C-9246-47D9-A937-6144FE8BFF0F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A31C8344-3E02-4EB8-8BD8-4C84B7959624\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1E78106-58E6-4D59-990F-75DA575BFAD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B620311B-34A3-48A6-82DF-6F078D7A4493\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://sourceforge.net/p/djvu/bugs/309/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4198-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2021/dsa-5032\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://sourceforge.net/p/djvu/bugs/309/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4198-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2021/dsa-5032\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}" } }
suse-su-2021:1645-1
Vulnerability from csaf_suse
Published
2021-05-19 11:54
Modified
2021-05-19 11:54
Summary
Security update for djvulibre
Notes
Title of the patch
Security update for djvulibre
Description of the patch
This update for djvulibre fixes the following issues:
Security issues fixed:
- CVE-2021-32491 [bsc#1185900]: Integer overflow in function render() in tools/ddjvu via crafted djvu file
- CVE-2021-32492 [bsc#1185904]: Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
- CVE-2021-32493 [bsc#1185905]: Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
Patchnames
HPE-Helion-OpenStack-8-2021-1645,SUSE-2021-1645,SUSE-OpenStack-Cloud-8-2021-1645,SUSE-OpenStack-Cloud-9-2021-1645,SUSE-OpenStack-Cloud-Crowbar-8-2021-1645,SUSE-OpenStack-Cloud-Crowbar-9-2021-1645,SUSE-SLE-SAP-12-SP3-2021-1645,SUSE-SLE-SAP-12-SP4-2021-1645,SUSE-SLE-SDK-12-SP5-2021-1645,SUSE-SLE-SERVER-12-SP2-BCL-2021-1645,SUSE-SLE-SERVER-12-SP3-2021-1645,SUSE-SLE-SERVER-12-SP3-BCL-2021-1645,SUSE-SLE-SERVER-12-SP4-LTSS-2021-1645,SUSE-SLE-SERVER-12-SP5-2021-1645
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for djvulibre", "title": "Title of the patch" }, { "category": "description", "text": "This update for djvulibre fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-32491 [bsc#1185900]: Integer overflow in function render() in tools/ddjvu via crafted djvu file\n- CVE-2021-32492 [bsc#1185904]: Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file\n- CVE-2021-32493 [bsc#1185905]: Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file\n", "title": "Description of the patch" }, { "category": "details", "text": "HPE-Helion-OpenStack-8-2021-1645,SUSE-2021-1645,SUSE-OpenStack-Cloud-8-2021-1645,SUSE-OpenStack-Cloud-9-2021-1645,SUSE-OpenStack-Cloud-Crowbar-8-2021-1645,SUSE-OpenStack-Cloud-Crowbar-9-2021-1645,SUSE-SLE-SAP-12-SP3-2021-1645,SUSE-SLE-SAP-12-SP4-2021-1645,SUSE-SLE-SDK-12-SP5-2021-1645,SUSE-SLE-SERVER-12-SP2-BCL-2021-1645,SUSE-SLE-SERVER-12-SP3-2021-1645,SUSE-SLE-SERVER-12-SP3-BCL-2021-1645,SUSE-SLE-SERVER-12-SP4-LTSS-2021-1645,SUSE-SLE-SERVER-12-SP5-2021-1645", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_1645-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2021:1645-1", "url": "https://www.suse.com/support/update/announcement/2021/suse-su-20211645-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2021:1645-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-May/008794.html" }, { "category": "self", "summary": "SUSE Bug 1185900", "url": "https://bugzilla.suse.com/1185900" }, { "category": "self", "summary": "SUSE Bug 1185904", "url": "https://bugzilla.suse.com/1185904" }, { "category": "self", "summary": "SUSE Bug 1185905", "url": "https://bugzilla.suse.com/1185905" }, { "category": "self", "summary": "SUSE CVE CVE-2019-18804 page", "url": "https://www.suse.com/security/cve/CVE-2019-18804/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-32491 page", "url": "https://www.suse.com/security/cve/CVE-2021-32491/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-32492 page", "url": "https://www.suse.com/security/cve/CVE-2021-32492/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-32493 page", "url": "https://www.suse.com/security/cve/CVE-2021-32493/" } ], "title": "Security update for djvulibre", "tracking": { "current_release_date": "2021-05-19T11:54:30Z", "generator": { "date": "2021-05-19T11:54:30Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2021:1645-1", "initial_release_date": "2021-05-19T11:54:30Z", "revision_history": [ { "date": "2021-05-19T11:54:30Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.25.3-5.9.1.aarch64", "product": { "name": "djvulibre-3.5.25.3-5.9.1.aarch64", "product_id": "djvulibre-3.5.25.3-5.9.1.aarch64" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.25.3-5.9.1.aarch64", "product": { "name": "djvulibre-doc-3.5.25.3-5.9.1.aarch64", "product_id": "djvulibre-doc-3.5.25.3-5.9.1.aarch64" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.25.3-5.9.1.aarch64", "product": { "name": "libdjvulibre-devel-3.5.25.3-5.9.1.aarch64", "product_id": "libdjvulibre-devel-3.5.25.3-5.9.1.aarch64" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.25.3-5.9.1.aarch64", "product": { "name": "libdjvulibre21-3.5.25.3-5.9.1.aarch64", "product_id": "libdjvulibre21-3.5.25.3-5.9.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.25.3-5.9.1.i586", "product": { "name": "djvulibre-3.5.25.3-5.9.1.i586", "product_id": "djvulibre-3.5.25.3-5.9.1.i586" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.25.3-5.9.1.i586", "product": { "name": "djvulibre-doc-3.5.25.3-5.9.1.i586", "product_id": "djvulibre-doc-3.5.25.3-5.9.1.i586" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.25.3-5.9.1.i586", "product": { "name": "libdjvulibre-devel-3.5.25.3-5.9.1.i586", "product_id": "libdjvulibre-devel-3.5.25.3-5.9.1.i586" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.25.3-5.9.1.i586", "product": { "name": "libdjvulibre21-3.5.25.3-5.9.1.i586", "product_id": "libdjvulibre21-3.5.25.3-5.9.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.25.3-5.9.1.ppc64le", "product": { "name": "djvulibre-3.5.25.3-5.9.1.ppc64le", "product_id": "djvulibre-3.5.25.3-5.9.1.ppc64le" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.25.3-5.9.1.ppc64le", "product": { "name": "djvulibre-doc-3.5.25.3-5.9.1.ppc64le", "product_id": "djvulibre-doc-3.5.25.3-5.9.1.ppc64le" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le", "product": { "name": "libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le", "product_id": "libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "product": { "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "product_id": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.25.3-5.9.1.s390", "product": { "name": "djvulibre-3.5.25.3-5.9.1.s390", "product_id": "djvulibre-3.5.25.3-5.9.1.s390" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.25.3-5.9.1.s390", "product": { "name": "djvulibre-doc-3.5.25.3-5.9.1.s390", "product_id": "djvulibre-doc-3.5.25.3-5.9.1.s390" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.25.3-5.9.1.s390", "product": { "name": "libdjvulibre-devel-3.5.25.3-5.9.1.s390", "product_id": "libdjvulibre-devel-3.5.25.3-5.9.1.s390" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.25.3-5.9.1.s390", "product": { "name": "libdjvulibre21-3.5.25.3-5.9.1.s390", "product_id": "libdjvulibre21-3.5.25.3-5.9.1.s390" } } ], "category": "architecture", "name": "s390" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.25.3-5.9.1.s390x", "product": { "name": "djvulibre-3.5.25.3-5.9.1.s390x", "product_id": "djvulibre-3.5.25.3-5.9.1.s390x" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.25.3-5.9.1.s390x", "product": { "name": "djvulibre-doc-3.5.25.3-5.9.1.s390x", "product_id": "djvulibre-doc-3.5.25.3-5.9.1.s390x" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.25.3-5.9.1.s390x", "product": { "name": "libdjvulibre-devel-3.5.25.3-5.9.1.s390x", "product_id": "libdjvulibre-devel-3.5.25.3-5.9.1.s390x" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.25.3-5.9.1.s390x", "product": { "name": "libdjvulibre21-3.5.25.3-5.9.1.s390x", "product_id": "libdjvulibre21-3.5.25.3-5.9.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64", "product": { "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64", "product_id": "libdjvulibre21-3.5.25.3-5.9.1.x86_64" } }, { "category": "product_version", "name": "djvulibre-3.5.25.3-5.9.1.x86_64", "product": { "name": "djvulibre-3.5.25.3-5.9.1.x86_64", "product_id": "djvulibre-3.5.25.3-5.9.1.x86_64" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.25.3-5.9.1.x86_64", "product": { "name": "djvulibre-doc-3.5.25.3-5.9.1.x86_64", "product_id": "djvulibre-doc-3.5.25.3-5.9.1.x86_64" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.25.3-5.9.1.x86_64", "product": { "name": "libdjvulibre-devel-3.5.25.3-5.9.1.x86_64", "product_id": "libdjvulibre-devel-3.5.25.3-5.9.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "HPE Helion OpenStack 8", "product": { "name": "HPE Helion OpenStack 8", "product_id": "HPE Helion OpenStack 8", "product_identification_helper": { "cpe": "cpe:/o:suse:hpe-helion-openstack:8" } } }, { "category": "product_name", "name": "SUSE OpenStack Cloud 8", "product": { "name": "SUSE OpenStack Cloud 8", "product_id": "SUSE OpenStack Cloud 8", "product_identification_helper": { "cpe": "cpe:/o:suse:suse-openstack-cloud:8" } } }, { "category": "product_name", "name": "SUSE OpenStack Cloud 9", "product": { "name": "SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9", "product_identification_helper": { "cpe": "cpe:/o:suse:suse-openstack-cloud:9" } } }, { "category": "product_name", "name": "SUSE OpenStack Cloud Crowbar 8", "product": { "name": "SUSE OpenStack Cloud Crowbar 8", "product_id": "SUSE OpenStack Cloud Crowbar 8", "product_identification_helper": { "cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:8" } } }, { "category": "product_name", "name": "SUSE OpenStack Cloud Crowbar 9", "product": { "name": "SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9", "product_identification_helper": { "cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:9" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:12:sp3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:12:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Software Development Kit 12 SP5", "product": { "name": "SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-sdk:12:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP2-BCL", "product": { "name": "SUSE Linux Enterprise Server 12 SP2-BCL", "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-bcl:12:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP3-LTSS", "product": { "name": "SUSE Linux Enterprise Server 12 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:12:sp3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP3-BCL", "product": { "name": "SUSE Linux Enterprise Server 12 SP3-BCL", "product_id": "SUSE Linux Enterprise Server 12 SP3-BCL", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-bcl:12:sp3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP4-LTSS", "product": { "name": "SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:12:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP5", "product": { "name": "SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:12:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:12:sp5" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of HPE Helion OpenStack 8", "product_id": "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64", "relates_to_product_reference": "HPE Helion OpenStack 8" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE OpenStack Cloud 8", "product_id": "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud 8" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud 9" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8", "product_id": "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.25.3-5.9.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64" }, "product_reference": "libdjvulibre-devel-3.5.25.3-5.9.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le" }, "product_reference": "libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.25.3-5.9.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x" }, "product_reference": "libdjvulibre-devel-3.5.25.3-5.9.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64" }, "product_reference": "libdjvulibre-devel-3.5.25.3-5.9.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL", "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL", "product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.9.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-18804", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-18804" } ], "notes": [ { "category": "general", "text": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.", "title": "CVE description" } ], "product_status": { "recommended": [ "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-18804", "url": "https://www.suse.com/security/cve/CVE-2019-18804" }, { "category": "external", "summary": "SUSE Bug 1156188 for CVE-2019-18804", "url": "https://bugzilla.suse.com/1156188" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-19T11:54:30Z", "details": "low" } ], "title": "CVE-2019-18804" }, { "cve": "CVE-2021-32491", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-32491" } ], "notes": [ { "category": "general", "text": "A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in tools/ddjvu via crafted djvu file may lead to application crash and other consequences.", "title": "CVE description" } ], "product_status": { "recommended": [ "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-32491", "url": "https://www.suse.com/security/cve/CVE-2021-32491" }, { "category": "external", "summary": "SUSE Bug 1185900 for CVE-2021-32491", "url": "https://bugzilla.suse.com/1185900" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-19T11:54:30Z", "details": "important" } ], "title": "CVE-2021-32491" }, { "cve": "CVE-2021-32492", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-32492" } ], "notes": [ { "category": "general", "text": "A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::has_data() via crafted djvu file may lead to application crash and other consequences.", "title": "CVE description" } ], "product_status": { "recommended": [ "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-32492", "url": "https://www.suse.com/security/cve/CVE-2021-32492" }, { "category": "external", "summary": "SUSE Bug 1185904 for CVE-2021-32492", "url": "https://bugzilla.suse.com/1185904" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-19T11:54:30Z", "details": "important" } ], "title": "CVE-2021-32492" }, { "cve": "CVE-2021-32493", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-32493" } ], "notes": [ { "category": "general", "text": "A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application crash and other consequences.", "title": "CVE description" } ], "product_status": { "recommended": [ "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-32493", "url": "https://www.suse.com/security/cve/CVE-2021-32493" }, { "category": "external", "summary": "SUSE Bug 1185905 for CVE-2021-32493", "url": "https://bugzilla.suse.com/1185905" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "HPE Helion OpenStack 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:libdjvulibre21-3.5.25.3-5.9.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:libdjvulibre21-3.5.25.3-5.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-19T11:54:30Z", "details": "important" } ], "title": "CVE-2021-32493" } ] }
suse-su-2020:0970-1
Vulnerability from csaf_suse
Published
2020-04-09 10:50
Modified
2020-04-09 10:50
Summary
Security update for djvulibre
Notes
Title of the patch
Security update for djvulibre
Description of the patch
This update for djvulibre fixes the following issues:
- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).
Patchnames
SUSE-2020-970,SUSE-SLE-SDK-12-SP4-2020-970,SUSE-SLE-SDK-12-SP5-2020-970,SUSE-SLE-SERVER-12-SP4-2020-970,SUSE-SLE-SERVER-12-SP5-2020-970
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for djvulibre", "title": "Title of the patch" }, { "category": "description", "text": "This update for djvulibre fixes the following issues:\n\t \n- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).\n\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2020-970,SUSE-SLE-SDK-12-SP4-2020-970,SUSE-SLE-SDK-12-SP5-2020-970,SUSE-SLE-SERVER-12-SP4-2020-970,SUSE-SLE-SERVER-12-SP5-2020-970", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_0970-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2020:0970-1", "url": "https://www.suse.com/support/update/announcement/2020/suse-su-20200970-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2020:0970-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-April/006696.html" }, { "category": "self", "summary": "SUSE Bug 1156188", "url": "https://bugzilla.suse.com/1156188" }, { "category": "self", "summary": "SUSE CVE CVE-2019-18804 page", "url": "https://www.suse.com/security/cve/CVE-2019-18804/" } ], "title": "Security update for djvulibre", "tracking": { "current_release_date": "2020-04-09T10:50:08Z", "generator": { "date": "2020-04-09T10:50:08Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2020:0970-1", "initial_release_date": "2020-04-09T10:50:08Z", "revision_history": [ { "date": "2020-04-09T10:50:08Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.25.3-5.6.10.aarch64", "product": { "name": "djvulibre-3.5.25.3-5.6.10.aarch64", "product_id": "djvulibre-3.5.25.3-5.6.10.aarch64" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.25.3-5.6.10.aarch64", "product": { "name": "djvulibre-doc-3.5.25.3-5.6.10.aarch64", "product_id": "djvulibre-doc-3.5.25.3-5.6.10.aarch64" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.25.3-5.6.10.aarch64", "product": { "name": "libdjvulibre-devel-3.5.25.3-5.6.10.aarch64", "product_id": "libdjvulibre-devel-3.5.25.3-5.6.10.aarch64" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.25.3-5.6.10.aarch64", "product": { "name": "libdjvulibre21-3.5.25.3-5.6.10.aarch64", "product_id": "libdjvulibre21-3.5.25.3-5.6.10.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.25.3-5.6.10.i586", "product": { "name": "djvulibre-3.5.25.3-5.6.10.i586", "product_id": "djvulibre-3.5.25.3-5.6.10.i586" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.25.3-5.6.10.i586", "product": { "name": "djvulibre-doc-3.5.25.3-5.6.10.i586", "product_id": "djvulibre-doc-3.5.25.3-5.6.10.i586" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.25.3-5.6.10.i586", "product": { "name": "libdjvulibre-devel-3.5.25.3-5.6.10.i586", "product_id": "libdjvulibre-devel-3.5.25.3-5.6.10.i586" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.25.3-5.6.10.i586", "product": { "name": "libdjvulibre21-3.5.25.3-5.6.10.i586", "product_id": "libdjvulibre21-3.5.25.3-5.6.10.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.25.3-5.6.10.ppc64le", "product": { "name": "djvulibre-3.5.25.3-5.6.10.ppc64le", "product_id": "djvulibre-3.5.25.3-5.6.10.ppc64le" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.25.3-5.6.10.ppc64le", "product": { "name": "djvulibre-doc-3.5.25.3-5.6.10.ppc64le", "product_id": "djvulibre-doc-3.5.25.3-5.6.10.ppc64le" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le", "product": { "name": "libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le", "product_id": "libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "product": { "name": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "product_id": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.25.3-5.6.10.s390", "product": { "name": "djvulibre-3.5.25.3-5.6.10.s390", "product_id": "djvulibre-3.5.25.3-5.6.10.s390" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.25.3-5.6.10.s390", "product": { "name": "djvulibre-doc-3.5.25.3-5.6.10.s390", "product_id": "djvulibre-doc-3.5.25.3-5.6.10.s390" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.25.3-5.6.10.s390", "product": { "name": "libdjvulibre-devel-3.5.25.3-5.6.10.s390", "product_id": "libdjvulibre-devel-3.5.25.3-5.6.10.s390" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.25.3-5.6.10.s390", "product": { "name": "libdjvulibre21-3.5.25.3-5.6.10.s390", "product_id": "libdjvulibre21-3.5.25.3-5.6.10.s390" } } ], "category": "architecture", "name": "s390" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.25.3-5.6.10.s390x", "product": { "name": "djvulibre-3.5.25.3-5.6.10.s390x", "product_id": "djvulibre-3.5.25.3-5.6.10.s390x" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.25.3-5.6.10.s390x", "product": { "name": "djvulibre-doc-3.5.25.3-5.6.10.s390x", "product_id": "djvulibre-doc-3.5.25.3-5.6.10.s390x" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.25.3-5.6.10.s390x", "product": { "name": "libdjvulibre-devel-3.5.25.3-5.6.10.s390x", "product_id": "libdjvulibre-devel-3.5.25.3-5.6.10.s390x" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.25.3-5.6.10.s390x", "product": { "name": "libdjvulibre21-3.5.25.3-5.6.10.s390x", "product_id": "libdjvulibre21-3.5.25.3-5.6.10.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.25.3-5.6.10.x86_64", "product": { "name": "djvulibre-3.5.25.3-5.6.10.x86_64", "product_id": "djvulibre-3.5.25.3-5.6.10.x86_64" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.25.3-5.6.10.x86_64", "product": { "name": "djvulibre-doc-3.5.25.3-5.6.10.x86_64", "product_id": "djvulibre-doc-3.5.25.3-5.6.10.x86_64" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.25.3-5.6.10.x86_64", "product": { "name": "libdjvulibre-devel-3.5.25.3-5.6.10.x86_64", "product_id": "libdjvulibre-devel-3.5.25.3-5.6.10.x86_64" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.25.3-5.6.10.x86_64", "product": { "name": "libdjvulibre21-3.5.25.3-5.6.10.x86_64", "product_id": "libdjvulibre21-3.5.25.3-5.6.10.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Software Development Kit 12 SP4", "product": { "name": "SUSE Linux Enterprise Software Development Kit 12 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-sdk:12:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Software Development Kit 12 SP5", "product": { "name": "SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-sdk:12:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP4", "product": { "name": "SUSE Linux Enterprise Server 12 SP4", "product_id": "SUSE Linux Enterprise Server 12 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:12:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:12:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP5", "product": { "name": "SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:12:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:12:sp5" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.25.3-5.6.10.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64" }, "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le" }, "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.25.3-5.6.10.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.s390x" }, "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.25.3-5.6.10.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64" }, "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.25.3-5.6.10.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64" }, "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le" }, "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.25.3-5.6.10.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.s390x" }, "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.25.3-5.6.10.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64" }, "product_reference": "libdjvulibre-devel-3.5.25.3-5.6.10.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.aarch64 as component of SUSE Linux Enterprise Server 12 SP4", "product_id": "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le as component of SUSE Linux Enterprise Server 12 SP4", "product_id": "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.s390x as component of SUSE Linux Enterprise Server 12 SP4", "product_id": "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.x86_64 as component of SUSE Linux Enterprise Server 12 SP4", "product_id": "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.aarch64 as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.s390x as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.25.3-5.6.10.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64" }, "product_reference": "libdjvulibre21-3.5.25.3-5.6.10.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-18804", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-18804" } ], "notes": [ { "category": "general", "text": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-18804", "url": "https://www.suse.com/security/cve/CVE-2019-18804" }, { "category": "external", "summary": "SUSE Bug 1156188 for CVE-2019-18804", "url": "https://bugzilla.suse.com/1156188" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Server 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Server 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdjvulibre21-3.5.25.3-5.6.10.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdjvulibre21-3.5.25.3-5.6.10.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP4:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libdjvulibre-devel-3.5.25.3-5.6.10.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-04-09T10:50:08Z", "details": "low" } ], "title": "CVE-2019-18804" } ] }
suse-su-2019:3033-2
Vulnerability from csaf_suse
Published
2020-07-07 11:41
Modified
2020-07-07 11:41
Summary
Security update for djvulibre
Notes
Title of the patch
Security update for djvulibre
Description of the patch
This update for djvulibre fixes the following issues:
Security issue fixed:
- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).
Other issue addressed:
- Fixed a crash when mmx was enabled (bsc#1154401)
Patchnames
SUSE-2019-3033,SUSE-SLE-Module-Packagehub-Subpackages-15-SP1-2020-1865
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for djvulibre", "title": "Title of the patch" }, { "category": "description", "text": "This update for djvulibre fixes the following issues:\n\nSecurity issue fixed: \n\n- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).\n\nOther issue addressed: \n- Fixed a crash when mmx was enabled (bsc#1154401)", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2019-3033,SUSE-SLE-Module-Packagehub-Subpackages-15-SP1-2020-1865", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_3033-2.json" }, { "category": "self", "summary": "URL for SUSE-SU-2019:3033-2", "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193033-2/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2019:3033-2", "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-July/007087.html" }, { "category": "self", "summary": "SUSE Bug 1154401", "url": "https://bugzilla.suse.com/1154401" }, { "category": "self", "summary": "SUSE Bug 1156188", "url": "https://bugzilla.suse.com/1156188" }, { "category": "self", "summary": "SUSE CVE CVE-2019-18804 page", "url": "https://www.suse.com/security/cve/CVE-2019-18804/" } ], "title": "Security update for djvulibre", "tracking": { "current_release_date": "2020-07-07T11:41:22Z", "generator": { "date": "2020-07-07T11:41:22Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2019:3033-2", "initial_release_date": "2020-07-07T11:41:22Z", "revision_history": [ { "date": "2020-07-07T11:41:22Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.27-3.8.1.aarch64", "product": { "name": "djvulibre-3.5.27-3.8.1.aarch64", "product_id": "djvulibre-3.5.27-3.8.1.aarch64" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.27-3.8.1.aarch64", "product": { "name": "djvulibre-doc-3.5.27-3.8.1.aarch64", "product_id": "djvulibre-doc-3.5.27-3.8.1.aarch64" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.27-3.8.1.aarch64", "product": { "name": "libdjvulibre-devel-3.5.27-3.8.1.aarch64", "product_id": "libdjvulibre-devel-3.5.27-3.8.1.aarch64" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.27-3.8.1.aarch64", "product": { "name": "libdjvulibre21-3.5.27-3.8.1.aarch64", "product_id": "libdjvulibre21-3.5.27-3.8.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.27-3.8.1.i586", "product": { "name": "djvulibre-3.5.27-3.8.1.i586", "product_id": "djvulibre-3.5.27-3.8.1.i586" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.27-3.8.1.i586", "product": { "name": "djvulibre-doc-3.5.27-3.8.1.i586", "product_id": "djvulibre-doc-3.5.27-3.8.1.i586" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.27-3.8.1.i586", "product": { "name": "libdjvulibre-devel-3.5.27-3.8.1.i586", "product_id": "libdjvulibre-devel-3.5.27-3.8.1.i586" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.27-3.8.1.i586", "product": { "name": "libdjvulibre21-3.5.27-3.8.1.i586", "product_id": "libdjvulibre21-3.5.27-3.8.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.27-3.8.1.ppc64le", "product": { "name": "djvulibre-3.5.27-3.8.1.ppc64le", "product_id": "djvulibre-3.5.27-3.8.1.ppc64le" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.27-3.8.1.ppc64le", "product": { "name": "djvulibre-doc-3.5.27-3.8.1.ppc64le", "product_id": "djvulibre-doc-3.5.27-3.8.1.ppc64le" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le", "product": { "name": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le", "product_id": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.27-3.8.1.ppc64le", "product": { "name": "libdjvulibre21-3.5.27-3.8.1.ppc64le", "product_id": "libdjvulibre21-3.5.27-3.8.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.27-3.8.1.s390x", "product": { "name": "djvulibre-3.5.27-3.8.1.s390x", "product_id": "djvulibre-3.5.27-3.8.1.s390x" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.27-3.8.1.s390x", "product": { "name": "djvulibre-doc-3.5.27-3.8.1.s390x", "product_id": "djvulibre-doc-3.5.27-3.8.1.s390x" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.27-3.8.1.s390x", "product": { "name": "libdjvulibre-devel-3.5.27-3.8.1.s390x", "product_id": "libdjvulibre-devel-3.5.27-3.8.1.s390x" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.27-3.8.1.s390x", "product": { "name": "libdjvulibre21-3.5.27-3.8.1.s390x", "product_id": "libdjvulibre21-3.5.27-3.8.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.27-3.8.1.x86_64", "product": { "name": "djvulibre-3.5.27-3.8.1.x86_64", "product_id": "djvulibre-3.5.27-3.8.1.x86_64" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.27-3.8.1.x86_64", "product": { "name": "djvulibre-doc-3.5.27-3.8.1.x86_64", "product_id": "djvulibre-doc-3.5.27-3.8.1.x86_64" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.27-3.8.1.x86_64", "product": { "name": "libdjvulibre-devel-3.5.27-3.8.1.x86_64", "product_id": "libdjvulibre-devel-3.5.27-3.8.1.x86_64" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.27-3.8.1.x86_64", "product": { "name": "libdjvulibre21-3.5.27-3.8.1.x86_64", "product_id": "libdjvulibre21-3.5.27-3.8.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Package Hub 15 SP1", "product": { "name": "SUSE Linux Enterprise Module for Package Hub 15 SP1", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:packagehub:15:sp1" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.27-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP1", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.aarch64" }, "product_reference": "djvulibre-3.5.27-3.8.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.27-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP1", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.ppc64le" }, "product_reference": "djvulibre-3.5.27-3.8.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.27-3.8.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP1", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.s390x" }, "product_reference": "djvulibre-3.5.27-3.8.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.27-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP1", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.x86_64" }, "product_reference": "djvulibre-3.5.27-3.8.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP1" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-18804", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-18804" } ], "notes": [ { "category": "general", "text": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-18804", "url": "https://www.suse.com/security/cve/CVE-2019-18804" }, { "category": "external", "summary": "SUSE Bug 1156188 for CVE-2019-18804", "url": "https://bugzilla.suse.com/1156188" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:djvulibre-3.5.27-3.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-07-07T11:41:22Z", "details": "low" } ], "title": "CVE-2019-18804" } ] }
suse-su-2019:3033-1
Vulnerability from csaf_suse
Published
2019-11-21 18:12
Modified
2019-11-21 18:12
Summary
Security update for djvulibre
Notes
Title of the patch
Security update for djvulibre
Description of the patch
This update for djvulibre fixes the following issues:
Security issue fixed:
- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).
Other issue addressed:
- Fixed a crash when mmx was enabled (bsc#1154401)
Patchnames
SUSE-2019-3033,SUSE-SLE-Module-Desktop-Applications-15-2019-3033,SUSE-SLE-Module-Desktop-Applications-15-SP1-2019-3033,SUSE-SLE-Module-Development-Tools-OBS-15-2019-3033,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-3033,SUSE-SLE-Module-Packagehub-Subpackages-15-2019-3033
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for djvulibre", "title": "Title of the patch" }, { "category": "description", "text": "This update for djvulibre fixes the following issues:\n\nSecurity issue fixed: \n\n- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).\n\nOther issue addressed: \n- Fixed a crash when mmx was enabled (bsc#1154401)", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2019-3033,SUSE-SLE-Module-Desktop-Applications-15-2019-3033,SUSE-SLE-Module-Desktop-Applications-15-SP1-2019-3033,SUSE-SLE-Module-Development-Tools-OBS-15-2019-3033,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-3033,SUSE-SLE-Module-Packagehub-Subpackages-15-2019-3033", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_3033-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2019:3033-1", "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193033-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2019:3033-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-November/006161.html" }, { "category": "self", "summary": "SUSE Bug 1154401", "url": "https://bugzilla.suse.com/1154401" }, { "category": "self", "summary": "SUSE Bug 1156188", "url": "https://bugzilla.suse.com/1156188" }, { "category": "self", "summary": "SUSE CVE CVE-2019-18804 page", "url": "https://www.suse.com/security/cve/CVE-2019-18804/" } ], "title": "Security update for djvulibre", "tracking": { "current_release_date": "2019-11-21T18:12:35Z", "generator": { "date": "2019-11-21T18:12:35Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2019:3033-1", "initial_release_date": "2019-11-21T18:12:35Z", "revision_history": [ { "date": "2019-11-21T18:12:35Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.27-3.8.1.aarch64", "product": { "name": "djvulibre-3.5.27-3.8.1.aarch64", "product_id": "djvulibre-3.5.27-3.8.1.aarch64" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.27-3.8.1.aarch64", "product": { "name": "djvulibre-doc-3.5.27-3.8.1.aarch64", "product_id": "djvulibre-doc-3.5.27-3.8.1.aarch64" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.27-3.8.1.aarch64", "product": { "name": "libdjvulibre-devel-3.5.27-3.8.1.aarch64", "product_id": "libdjvulibre-devel-3.5.27-3.8.1.aarch64" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.27-3.8.1.aarch64", "product": { "name": "libdjvulibre21-3.5.27-3.8.1.aarch64", "product_id": "libdjvulibre21-3.5.27-3.8.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.27-3.8.1.i586", "product": { "name": "djvulibre-3.5.27-3.8.1.i586", "product_id": "djvulibre-3.5.27-3.8.1.i586" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.27-3.8.1.i586", "product": { "name": "djvulibre-doc-3.5.27-3.8.1.i586", "product_id": "djvulibre-doc-3.5.27-3.8.1.i586" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.27-3.8.1.i586", "product": { "name": "libdjvulibre-devel-3.5.27-3.8.1.i586", "product_id": "libdjvulibre-devel-3.5.27-3.8.1.i586" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.27-3.8.1.i586", "product": { "name": "libdjvulibre21-3.5.27-3.8.1.i586", "product_id": "libdjvulibre21-3.5.27-3.8.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.27-3.8.1.ppc64le", "product": { "name": "djvulibre-3.5.27-3.8.1.ppc64le", "product_id": "djvulibre-3.5.27-3.8.1.ppc64le" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.27-3.8.1.ppc64le", "product": { "name": "djvulibre-doc-3.5.27-3.8.1.ppc64le", "product_id": "djvulibre-doc-3.5.27-3.8.1.ppc64le" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le", "product": { "name": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le", "product_id": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.27-3.8.1.ppc64le", "product": { "name": "libdjvulibre21-3.5.27-3.8.1.ppc64le", "product_id": "libdjvulibre21-3.5.27-3.8.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.27-3.8.1.s390x", "product": { "name": "djvulibre-3.5.27-3.8.1.s390x", "product_id": "djvulibre-3.5.27-3.8.1.s390x" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.27-3.8.1.s390x", "product": { "name": "djvulibre-doc-3.5.27-3.8.1.s390x", "product_id": "djvulibre-doc-3.5.27-3.8.1.s390x" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.27-3.8.1.s390x", "product": { "name": "libdjvulibre-devel-3.5.27-3.8.1.s390x", "product_id": "libdjvulibre-devel-3.5.27-3.8.1.s390x" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.27-3.8.1.s390x", "product": { "name": "libdjvulibre21-3.5.27-3.8.1.s390x", "product_id": "libdjvulibre21-3.5.27-3.8.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.27-3.8.1.x86_64", "product": { "name": "djvulibre-3.5.27-3.8.1.x86_64", "product_id": "djvulibre-3.5.27-3.8.1.x86_64" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.27-3.8.1.x86_64", "product": { "name": "djvulibre-doc-3.5.27-3.8.1.x86_64", "product_id": "djvulibre-doc-3.5.27-3.8.1.x86_64" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.27-3.8.1.x86_64", "product": { "name": "libdjvulibre-devel-3.5.27-3.8.1.x86_64", "product_id": "libdjvulibre-devel-3.5.27-3.8.1.x86_64" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.27-3.8.1.x86_64", "product": { "name": "libdjvulibre21-3.5.27-3.8.1.x86_64", "product_id": "libdjvulibre21-3.5.27-3.8.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Desktop Applications 15", "product": { "name": "SUSE Linux Enterprise Module for Desktop Applications 15", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-desktop-applications:15" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product": { "name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-desktop-applications:15:sp1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Module for Package Hub 15", "product": { "name": "SUSE Linux Enterprise Module for Package Hub 15", "product_id": "SUSE Linux Enterprise Module for Package Hub 15", "product_identification_helper": { "cpe": "cpe:/o:suse:packagehub:15" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.27-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.aarch64" }, "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.ppc64le" }, "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.27-3.8.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.s390x" }, "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.27-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.x86_64" }, "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.27-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.aarch64" }, "product_reference": "libdjvulibre21-3.5.27-3.8.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.27-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.ppc64le" }, "product_reference": "libdjvulibre21-3.5.27-3.8.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.27-3.8.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.s390x" }, "product_reference": "libdjvulibre21-3.5.27-3.8.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.27-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.27-3.8.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.27-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.aarch64" }, "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.ppc64le" }, "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.27-3.8.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.s390x" }, "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.27-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.x86_64" }, "product_reference": "libdjvulibre-devel-3.5.27-3.8.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.27-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.aarch64" }, "product_reference": "libdjvulibre21-3.5.27-3.8.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.27-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.ppc64le" }, "product_reference": "libdjvulibre21-3.5.27-3.8.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.27-3.8.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.s390x" }, "product_reference": "libdjvulibre21-3.5.27-3.8.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.27-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.27-3.8.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.27-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15", "product_id": "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.aarch64" }, "product_reference": "djvulibre-3.5.27-3.8.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.27-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15", "product_id": "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.ppc64le" }, "product_reference": "djvulibre-3.5.27-3.8.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.27-3.8.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15", "product_id": "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.s390x" }, "product_reference": "djvulibre-3.5.27-3.8.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.27-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15", "product_id": "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.x86_64" }, "product_reference": "djvulibre-3.5.27-3.8.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-18804", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-18804" } ], "notes": [ { "category": "general", "text": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-18804", "url": "https://www.suse.com/security/cve/CVE-2019-18804" }, { "category": "external", "summary": "SUSE Bug 1156188 for CVE-2019-18804", "url": "https://bugzilla.suse.com/1156188" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre-devel-3.5.27-3.8.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libdjvulibre21-3.5.27-3.8.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre-devel-3.5.27-3.8.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15:libdjvulibre21-3.5.27-3.8.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15:djvulibre-3.5.27-3.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2019-11-21T18:12:35Z", "details": "low" } ], "title": "CVE-2019-18804" } ] }
opensuse-su-2024:10719-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
djvulibre-3.5.28-3.2 on GA media
Notes
Title of the patch
djvulibre-3.5.28-3.2 on GA media
Description of the patch
These are all security issues fixed in the djvulibre-3.5.28-3.2 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10719
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "djvulibre-3.5.28-3.2 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the djvulibre-3.5.28-3.2 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-10719", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10719-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2019-15142 page", "url": "https://www.suse.com/security/cve/CVE-2019-15142/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-15143 page", "url": "https://www.suse.com/security/cve/CVE-2019-15143/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-15144 page", "url": "https://www.suse.com/security/cve/CVE-2019-15144/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-15145 page", "url": "https://www.suse.com/security/cve/CVE-2019-15145/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-18804 page", "url": "https://www.suse.com/security/cve/CVE-2019-18804/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-32490 page", "url": "https://www.suse.com/security/cve/CVE-2021-32490/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-32491 page", "url": "https://www.suse.com/security/cve/CVE-2021-32491/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-32492 page", "url": "https://www.suse.com/security/cve/CVE-2021-32492/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-32493 page", "url": "https://www.suse.com/security/cve/CVE-2021-32493/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-3500 page", "url": "https://www.suse.com/security/cve/CVE-2021-3500/" } ], "title": "djvulibre-3.5.28-3.2 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:10719-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.28-3.2.aarch64", "product": { "name": "djvulibre-3.5.28-3.2.aarch64", "product_id": "djvulibre-3.5.28-3.2.aarch64" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.28-3.2.aarch64", "product": { "name": "djvulibre-doc-3.5.28-3.2.aarch64", "product_id": "djvulibre-doc-3.5.28-3.2.aarch64" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.28-3.2.aarch64", "product": { "name": "libdjvulibre-devel-3.5.28-3.2.aarch64", "product_id": "libdjvulibre-devel-3.5.28-3.2.aarch64" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.28-3.2.aarch64", "product": { "name": "libdjvulibre21-3.5.28-3.2.aarch64", "product_id": "libdjvulibre21-3.5.28-3.2.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.28-3.2.ppc64le", "product": { "name": "djvulibre-3.5.28-3.2.ppc64le", "product_id": "djvulibre-3.5.28-3.2.ppc64le" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.28-3.2.ppc64le", "product": { "name": "djvulibre-doc-3.5.28-3.2.ppc64le", "product_id": "djvulibre-doc-3.5.28-3.2.ppc64le" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.28-3.2.ppc64le", "product": { "name": "libdjvulibre-devel-3.5.28-3.2.ppc64le", "product_id": "libdjvulibre-devel-3.5.28-3.2.ppc64le" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.28-3.2.ppc64le", "product": { "name": "libdjvulibre21-3.5.28-3.2.ppc64le", "product_id": "libdjvulibre21-3.5.28-3.2.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.28-3.2.s390x", "product": { "name": "djvulibre-3.5.28-3.2.s390x", "product_id": "djvulibre-3.5.28-3.2.s390x" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.28-3.2.s390x", "product": { "name": "djvulibre-doc-3.5.28-3.2.s390x", "product_id": "djvulibre-doc-3.5.28-3.2.s390x" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.28-3.2.s390x", "product": { "name": "libdjvulibre-devel-3.5.28-3.2.s390x", "product_id": "libdjvulibre-devel-3.5.28-3.2.s390x" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.28-3.2.s390x", "product": { "name": "libdjvulibre21-3.5.28-3.2.s390x", "product_id": "libdjvulibre21-3.5.28-3.2.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.28-3.2.x86_64", "product": { "name": "djvulibre-3.5.28-3.2.x86_64", "product_id": "djvulibre-3.5.28-3.2.x86_64" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.28-3.2.x86_64", "product": { "name": "djvulibre-doc-3.5.28-3.2.x86_64", "product_id": "djvulibre-doc-3.5.28-3.2.x86_64" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.28-3.2.x86_64", "product": { "name": "libdjvulibre-devel-3.5.28-3.2.x86_64", "product_id": "libdjvulibre-devel-3.5.28-3.2.x86_64" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.28-3.2.x86_64", "product": { "name": "libdjvulibre21-3.5.28-3.2.x86_64", "product_id": "libdjvulibre21-3.5.28-3.2.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.28-3.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64" }, "product_reference": "djvulibre-3.5.28-3.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.28-3.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le" }, "product_reference": "djvulibre-3.5.28-3.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.28-3.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x" }, "product_reference": "djvulibre-3.5.28-3.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.28-3.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64" }, "product_reference": "djvulibre-3.5.28-3.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-doc-3.5.28-3.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64" }, "product_reference": "djvulibre-doc-3.5.28-3.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-doc-3.5.28-3.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le" }, "product_reference": "djvulibre-doc-3.5.28-3.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-doc-3.5.28-3.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x" }, "product_reference": "djvulibre-doc-3.5.28-3.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-doc-3.5.28-3.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64" }, "product_reference": "djvulibre-doc-3.5.28-3.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.28-3.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64" }, "product_reference": "libdjvulibre-devel-3.5.28-3.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.28-3.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le" }, "product_reference": "libdjvulibre-devel-3.5.28-3.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.28-3.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x" }, "product_reference": "libdjvulibre-devel-3.5.28-3.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.28-3.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64" }, "product_reference": "libdjvulibre-devel-3.5.28-3.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.28-3.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64" }, "product_reference": "libdjvulibre21-3.5.28-3.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.28-3.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le" }, "product_reference": "libdjvulibre21-3.5.28-3.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.28-3.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x" }, "product_reference": "libdjvulibre21-3.5.28-3.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.28-3.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" }, "product_reference": "libdjvulibre21-3.5.28-3.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-15142", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-15142" } ], "notes": [ { "category": "general", "text": "In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read) by crafting a DJVU file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-15142", "url": "https://www.suse.com/security/cve/CVE-2019-15142" }, { "category": "external", "summary": "SUSE Bug 1146702 for CVE-2019-15142", "url": "https://bugzilla.suse.com/1146702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2019-15142" }, { "cve": "CVE-2019-15143", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-15143" } ], "notes": [ { "category": "general", "text": "In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhaustion caused by a GBitmap::read_rle_raw infinite loop) by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-15143", "url": "https://www.suse.com/security/cve/CVE-2019-15143" }, { "category": "external", "summary": "SUSE Bug 1146569 for CVE-2019-15143", "url": "https://bugzilla.suse.com/1146569" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2019-15143" }, { "cve": "CVE-2019-15144", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-15144" } ], "notes": [ { "category": "general", "text": "In DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate\u003cTYPE\u003e::sort) allows attackers to cause a denial-of-service (application crash due to an Uncontrolled Recursion) by crafting a PBM image file that is mishandled in libdjvu/GContainer.h.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-15144", "url": "https://www.suse.com/security/cve/CVE-2019-15144" }, { "category": "external", "summary": "SUSE Bug 1146571 for CVE-2019-15144", "url": "https://bugzilla.suse.com/1146571" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2019-15144" }, { "cve": "CVE-2019-15145", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-15145" } ], "notes": [ { "category": "general", "text": "DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h because of a missing zero-bytes check in libdjvu/GBitmap.h.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-15145", "url": "https://www.suse.com/security/cve/CVE-2019-15145" }, { "category": "external", "summary": "SUSE Bug 1146572 for CVE-2019-15145", "url": "https://bugzilla.suse.com/1146572" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2019-15145" }, { "cve": "CVE-2019-18804", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-18804" } ], "notes": [ { "category": "general", "text": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-18804", "url": "https://www.suse.com/security/cve/CVE-2019-18804" }, { "category": "external", "summary": "SUSE Bug 1156188 for CVE-2019-18804", "url": "https://bugzilla.suse.com/1156188" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2019-18804" }, { "cve": "CVE-2021-32490", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-32490" } ], "notes": [ { "category": "general", "text": "A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu file may lead to application crash and other consequences.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-32490", "url": "https://www.suse.com/security/cve/CVE-2021-32490" }, { "category": "external", "summary": "SUSE Bug 1185895 for CVE-2021-32490", "url": "https://bugzilla.suse.com/1185895" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2021-32490" }, { "cve": "CVE-2021-32491", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-32491" } ], "notes": [ { "category": "general", "text": "A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in tools/ddjvu via crafted djvu file may lead to application crash and other consequences.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-32491", "url": "https://www.suse.com/security/cve/CVE-2021-32491" }, { "category": "external", "summary": "SUSE Bug 1185900 for CVE-2021-32491", "url": "https://bugzilla.suse.com/1185900" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2021-32491" }, { "cve": "CVE-2021-32492", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-32492" } ], "notes": [ { "category": "general", "text": "A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::has_data() via crafted djvu file may lead to application crash and other consequences.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-32492", "url": "https://www.suse.com/security/cve/CVE-2021-32492" }, { "category": "external", "summary": "SUSE Bug 1185904 for CVE-2021-32492", "url": "https://bugzilla.suse.com/1185904" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2021-32492" }, { "cve": "CVE-2021-32493", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-32493" } ], "notes": [ { "category": "general", "text": "A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application crash and other consequences.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-32493", "url": "https://www.suse.com/security/cve/CVE-2021-32493" }, { "category": "external", "summary": "SUSE Bug 1185905 for CVE-2021-32493", "url": "https://bugzilla.suse.com/1185905" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2021-32493" }, { "cve": "CVE-2021-3500", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-3500" } ], "notes": [ { "category": "general", "text": "A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::get_djvu_file() via crafted djvu file may lead to application crash and other consequences.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-3500", "url": "https://www.suse.com/security/cve/CVE-2021-3500" }, { "category": "external", "summary": "SUSE Bug 1186253 for CVE-2021-3500", "url": "https://bugzilla.suse.com/1186253" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.s390x", "openSUSE Tumbleweed:djvulibre-doc-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre-devel-3.5.28-3.2.x86_64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.aarch64", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.ppc64le", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.s390x", "openSUSE Tumbleweed:libdjvulibre21-3.5.28-3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2021-3500" } ] }
opensuse-su-2019:2574-1
Vulnerability from csaf_opensuse
Published
2019-11-26 23:22
Modified
2019-11-26 23:22
Summary
Security update for djvulibre
Notes
Title of the patch
Security update for djvulibre
Description of the patch
This update for djvulibre fixes the following issues:
Security issue fixed:
- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).
Other issue addressed:
- Fixed a crash when mmx was enabled (bsc#1154401)
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames
openSUSE-2019-2574
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for djvulibre", "title": "Title of the patch" }, { "category": "description", "text": "This update for djvulibre fixes the following issues:\n\nSecurity issue fixed: \n\n- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).\n\nOther issue addressed: \n- Fixed a crash when mmx was enabled (bsc#1154401)\nThis update was imported from the SUSE:SLE-15:Update update project.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2019-2574", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_2574-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2019:2574-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QAQFMGLTFKVFKOBMQTFNGOIBKHRNNCDK/#QAQFMGLTFKVFKOBMQTFNGOIBKHRNNCDK" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2019:2574-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QAQFMGLTFKVFKOBMQTFNGOIBKHRNNCDK/#QAQFMGLTFKVFKOBMQTFNGOIBKHRNNCDK" }, { "category": "self", "summary": "SUSE Bug 1154401", "url": "https://bugzilla.suse.com/1154401" }, { "category": "self", "summary": "SUSE Bug 1156188", "url": "https://bugzilla.suse.com/1156188" }, { "category": "self", "summary": "SUSE CVE CVE-2019-18804 page", "url": "https://www.suse.com/security/cve/CVE-2019-18804/" } ], "title": "Security update for djvulibre", "tracking": { "current_release_date": "2019-11-26T23:22:22Z", "generator": { "date": "2019-11-26T23:22:22Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2019:2574-1", "initial_release_date": "2019-11-26T23:22:22Z", "revision_history": [ { "date": "2019-11-26T23:22:22Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.27-lp150.2.6.1.i586", "product": { "name": "djvulibre-3.5.27-lp150.2.6.1.i586", "product_id": "djvulibre-3.5.27-lp150.2.6.1.i586" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.27-lp150.2.6.1.i586", "product": { "name": "djvulibre-doc-3.5.27-lp150.2.6.1.i586", "product_id": "djvulibre-doc-3.5.27-lp150.2.6.1.i586" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.27-lp150.2.6.1.i586", "product": { "name": "libdjvulibre-devel-3.5.27-lp150.2.6.1.i586", "product_id": "libdjvulibre-devel-3.5.27-lp150.2.6.1.i586" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.27-lp150.2.6.1.i586", "product": { "name": "libdjvulibre21-3.5.27-lp150.2.6.1.i586", "product_id": "libdjvulibre21-3.5.27-lp150.2.6.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.27-lp150.2.6.1.x86_64", "product": { "name": "djvulibre-3.5.27-lp150.2.6.1.x86_64", "product_id": "djvulibre-3.5.27-lp150.2.6.1.x86_64" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.27-lp150.2.6.1.x86_64", "product": { "name": "djvulibre-doc-3.5.27-lp150.2.6.1.x86_64", "product_id": "djvulibre-doc-3.5.27-lp150.2.6.1.x86_64" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64", "product": { "name": "libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64", "product_id": "libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.27-lp150.2.6.1.x86_64", "product": { "name": "libdjvulibre21-3.5.27-lp150.2.6.1.x86_64", "product_id": "libdjvulibre21-3.5.27-lp150.2.6.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.0", "product": { "name": "openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.0" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.27-lp150.2.6.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.i586" }, "product_reference": "djvulibre-3.5.27-lp150.2.6.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.27-lp150.2.6.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.x86_64" }, "product_reference": "djvulibre-3.5.27-lp150.2.6.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-doc-3.5.27-lp150.2.6.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.i586" }, "product_reference": "djvulibre-doc-3.5.27-lp150.2.6.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-doc-3.5.27-lp150.2.6.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.x86_64" }, "product_reference": "djvulibre-doc-3.5.27-lp150.2.6.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.27-lp150.2.6.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.i586" }, "product_reference": "libdjvulibre-devel-3.5.27-lp150.2.6.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64" }, "product_reference": "libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.27-lp150.2.6.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.i586" }, "product_reference": "libdjvulibre21-3.5.27-lp150.2.6.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.27-lp150.2.6.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.27-lp150.2.6.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-18804", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-18804" } ], "notes": [ { "category": "general", "text": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.i586", "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.x86_64", "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.i586", "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.x86_64", "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.i586", "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64", "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.i586", "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-18804", "url": "https://www.suse.com/security/cve/CVE-2019-18804" }, { "category": "external", "summary": "SUSE Bug 1156188 for CVE-2019-18804", "url": "https://bugzilla.suse.com/1156188" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.i586", "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.x86_64", "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.i586", "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.x86_64", "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.i586", "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64", "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.i586", "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.i586", "openSUSE Leap 15.0:djvulibre-3.5.27-lp150.2.6.1.x86_64", "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.i586", "openSUSE Leap 15.0:djvulibre-doc-3.5.27-lp150.2.6.1.x86_64", "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.i586", "openSUSE Leap 15.0:libdjvulibre-devel-3.5.27-lp150.2.6.1.x86_64", "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.i586", "openSUSE Leap 15.0:libdjvulibre21-3.5.27-lp150.2.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2019-11-26T23:22:22Z", "details": "low" } ], "title": "CVE-2019-18804" } ] }
opensuse-su-2019:2576-1
Vulnerability from csaf_opensuse
Published
2019-11-27 05:20
Modified
2019-11-27 05:20
Summary
Security update for djvulibre
Notes
Title of the patch
Security update for djvulibre
Description of the patch
This update for djvulibre fixes the following issues:
Security issue fixed:
- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).
Other issue addressed:
- Fixed a crash when mmx was enabled (bsc#1154401)
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames
openSUSE-2019-2576
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for djvulibre", "title": "Title of the patch" }, { "category": "description", "text": "This update for djvulibre fixes the following issues:\n\nSecurity issue fixed: \n\n- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).\n\nOther issue addressed: \n- Fixed a crash when mmx was enabled (bsc#1154401)\nThis update was imported from the SUSE:SLE-15:Update update project.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2019-2576", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_2576-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2019:2576-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VBXTUDPDXNGZTLXYDTZ3ZHANL3FPHD3Z/#VBXTUDPDXNGZTLXYDTZ3ZHANL3FPHD3Z" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2019:2576-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VBXTUDPDXNGZTLXYDTZ3ZHANL3FPHD3Z/#VBXTUDPDXNGZTLXYDTZ3ZHANL3FPHD3Z" }, { "category": "self", "summary": "SUSE Bug 1154401", "url": "https://bugzilla.suse.com/1154401" }, { "category": "self", "summary": "SUSE Bug 1156188", "url": "https://bugzilla.suse.com/1156188" }, { "category": "self", "summary": "SUSE CVE CVE-2019-18804 page", "url": "https://www.suse.com/security/cve/CVE-2019-18804/" } ], "title": "Security update for djvulibre", "tracking": { "current_release_date": "2019-11-27T05:20:36Z", "generator": { "date": "2019-11-27T05:20:36Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2019:2576-1", "initial_release_date": "2019-11-27T05:20:36Z", "revision_history": [ { "date": "2019-11-27T05:20:36Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.27-lp151.3.6.1.i586", "product": { "name": "djvulibre-3.5.27-lp151.3.6.1.i586", "product_id": "djvulibre-3.5.27-lp151.3.6.1.i586" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.27-lp151.3.6.1.i586", "product": { "name": "djvulibre-doc-3.5.27-lp151.3.6.1.i586", "product_id": "djvulibre-doc-3.5.27-lp151.3.6.1.i586" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.27-lp151.3.6.1.i586", "product": { "name": "libdjvulibre-devel-3.5.27-lp151.3.6.1.i586", "product_id": "libdjvulibre-devel-3.5.27-lp151.3.6.1.i586" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.27-lp151.3.6.1.i586", "product": { "name": "libdjvulibre21-3.5.27-lp151.3.6.1.i586", "product_id": "libdjvulibre21-3.5.27-lp151.3.6.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "djvulibre-3.5.27-lp151.3.6.1.x86_64", "product": { "name": "djvulibre-3.5.27-lp151.3.6.1.x86_64", "product_id": "djvulibre-3.5.27-lp151.3.6.1.x86_64" } }, { "category": "product_version", "name": "djvulibre-doc-3.5.27-lp151.3.6.1.x86_64", "product": { "name": "djvulibre-doc-3.5.27-lp151.3.6.1.x86_64", "product_id": "djvulibre-doc-3.5.27-lp151.3.6.1.x86_64" } }, { "category": "product_version", "name": "libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64", "product": { "name": "libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64", "product_id": "libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64" } }, { "category": "product_version", "name": "libdjvulibre21-3.5.27-lp151.3.6.1.x86_64", "product": { "name": "libdjvulibre21-3.5.27-lp151.3.6.1.x86_64", "product_id": "libdjvulibre21-3.5.27-lp151.3.6.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.1", "product": { "name": "openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.1" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.27-lp151.3.6.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.i586" }, "product_reference": "djvulibre-3.5.27-lp151.3.6.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-3.5.27-lp151.3.6.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.x86_64" }, "product_reference": "djvulibre-3.5.27-lp151.3.6.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-doc-3.5.27-lp151.3.6.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.i586" }, "product_reference": "djvulibre-doc-3.5.27-lp151.3.6.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "djvulibre-doc-3.5.27-lp151.3.6.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.x86_64" }, "product_reference": "djvulibre-doc-3.5.27-lp151.3.6.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.27-lp151.3.6.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.i586" }, "product_reference": "libdjvulibre-devel-3.5.27-lp151.3.6.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64" }, "product_reference": "libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.27-lp151.3.6.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.i586" }, "product_reference": "libdjvulibre21-3.5.27-lp151.3.6.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libdjvulibre21-3.5.27-lp151.3.6.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.x86_64" }, "product_reference": "libdjvulibre21-3.5.27-lp151.3.6.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-18804", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-18804" } ], "notes": [ { "category": "general", "text": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.i586", "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.x86_64", "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.i586", "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.x86_64", "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.i586", "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64", "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.i586", "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-18804", "url": "https://www.suse.com/security/cve/CVE-2019-18804" }, { "category": "external", "summary": "SUSE Bug 1156188 for CVE-2019-18804", "url": "https://bugzilla.suse.com/1156188" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.i586", "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.x86_64", "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.i586", "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.x86_64", "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.i586", "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64", "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.i586", "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.i586", "openSUSE Leap 15.1:djvulibre-3.5.27-lp151.3.6.1.x86_64", "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.i586", "openSUSE Leap 15.1:djvulibre-doc-3.5.27-lp151.3.6.1.x86_64", "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.i586", "openSUSE Leap 15.1:libdjvulibre-devel-3.5.27-lp151.3.6.1.x86_64", "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.i586", "openSUSE Leap 15.1:libdjvulibre21-3.5.27-lp151.3.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2019-11-27T05:20:36Z", "details": "low" } ], "title": "CVE-2019-18804" } ] }
fkie_cve-2019-18804
Vulnerability from fkie_nvd
Published
2019-11-07 06:15
Modified
2024-11-21 04:33
Severity ?
Summary
DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
djvulibre_project | djvulibre | 3.5.27 | |
debian | debian_linux | 8.0 | |
debian | debian_linux | 9.0 | |
debian | debian_linux | 10.0 | |
debian | debian_linux | 11.0 | |
fedoraproject | fedora | 30 | |
fedoraproject | fedora | 31 | |
canonical | ubuntu_linux | 16.04 | |
canonical | ubuntu_linux | 18.04 | |
canonical | ubuntu_linux | 19.04 | |
canonical | ubuntu_linux | 19.10 | |
opensuse | leap | 15.0 | |
opensuse | leap | 15.1 |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:djvulibre_project:djvulibre:3.5.27:*:*:*:*:*:*:*", "matchCriteriaId": "6174AF9B-0B0B-4602-A693-A775A541276B", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43", "vulnerable": true }, { "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252", "vulnerable": true }, { "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73", "vulnerable": true }, { "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*", "matchCriteriaId": "97A4B8DF-58DA-4AB6-A1F9-331B36409BA3", "vulnerable": true }, { "criteria": "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*", "matchCriteriaId": "80F0FA5D-8D3B-4C0E-81E2-87998286AF33", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*", "matchCriteriaId": "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6", "vulnerable": true }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D", "vulnerable": true }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*", "matchCriteriaId": "CD783B0C-9246-47D9-A937-6144FE8BFF0F", "vulnerable": true }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*", "matchCriteriaId": "A31C8344-3E02-4EB8-8BD8-4C84B7959624", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*", "matchCriteriaId": "F1E78106-58E6-4D59-990F-75DA575BFAD9", "vulnerable": true }, { "criteria": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*", "matchCriteriaId": "B620311B-34A3-48A6-82DF-6F078D7A4493", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp." }, { "lang": "es", "value": "DjVuLibre versi\u00f3n 3.5.27, presenta una desreferencia del puntero NULL en la funci\u00f3n DJVU::filter_fv en el archivo IW44EncodeCodec.cpp." } ], "id": "CVE-2019-18804", "lastModified": "2024-11-21T04:33:36.020", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2019-11-07T06:15:10.653", "references": [ { "source": "cve@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html" }, { "source": "cve@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html" }, { "source": "cve@mitre.org", "tags": [ "Exploit", "Third Party Advisory" ], "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md" }, { "source": "cve@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html" }, { "source": "cve@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html" }, { "source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/" }, { "source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/" }, { "source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/" }, { "source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/" }, { "source": "cve@mitre.org", "tags": [ "Exploit", "Third Party Advisory" ], "url": "https://sourceforge.net/p/djvu/bugs/309/" }, { "source": "cve@mitre.org", "tags": [ "Third Party Advisory" ], "url": "https://usn.ubuntu.com/4198-1/" }, { "source": "cve@mitre.org", "tags": [ "Third Party Advisory" ], "url": "https://www.debian.org/security/2021/dsa-5032" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Exploit", "Third Party Advisory" ], "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Exploit", "Third Party Advisory" ], "url": "https://sourceforge.net/p/djvu/bugs/309/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://usn.ubuntu.com/4198-1/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://www.debian.org/security/2021/dsa-5032" } ], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-476" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
gsd-2019-18804
Vulnerability from gsd
Modified
2023-12-13 01:23
Details
DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2019-18804", "description": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.", "id": "GSD-2019-18804", "references": [ "https://www.suse.com/security/cve/CVE-2019-18804.html", "https://www.debian.org/security/2021/dsa-5032", "https://ubuntu.com/security/CVE-2019-18804", "https://advisories.mageia.org/CVE-2019-18804.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2019-18804" ], "details": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.", "id": "GSD-2019-18804", "modified": "2023-12-13T01:23:50.431468Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-18804", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://sourceforge.net/p/djvu/bugs/309/", "refsource": "MISC", "url": "https://sourceforge.net/p/djvu/bugs/309/" }, { "name": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md", "refsource": "MISC", "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md" }, { "name": "[debian-lts-announce] 20191108 [SECURITY] [DLA 1985-1] djvulibre security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html" }, { "name": "USN-4198-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/4198-1/" }, { "name": "FEDORA-2019-f923712bab", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/" }, { "name": "FEDORA-2019-6bc8be9d84", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/" }, { "name": "openSUSE-SU-2019:2574", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html" }, { "name": "openSUSE-SU-2019:2576", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html" }, { "name": "FEDORA-2019-18cf104b5d", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/" }, { "name": "FEDORA-2019-7fac263417", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/" }, { "name": "[debian-lts-announce] 20210526 [SECURITY] [DLA 2667-1] djvulibre security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html" }, { "name": "DSA-5032", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2021/dsa-5032" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:djvulibre_project:djvulibre:3.5.27:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-18804" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-476" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md", "refsource": "MISC", "tags": [ "Exploit", "Third Party Advisory" ], "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md" }, { "name": "https://sourceforge.net/p/djvu/bugs/309/", "refsource": "MISC", "tags": [ "Exploit", "Third Party Advisory" ], "url": "https://sourceforge.net/p/djvu/bugs/309/" }, { "name": "[debian-lts-announce] 20191108 [SECURITY] [DLA 1985-1] djvulibre security update", "refsource": "MLIST", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html" }, { "name": "USN-4198-1", "refsource": "UBUNTU", "tags": [ "Third Party Advisory" ], "url": "https://usn.ubuntu.com/4198-1/" }, { "name": "FEDORA-2019-f923712bab", "refsource": "FEDORA", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/" }, { "name": "FEDORA-2019-6bc8be9d84", "refsource": "FEDORA", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/" }, { "name": "openSUSE-SU-2019:2574", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html" }, { "name": "openSUSE-SU-2019:2576", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html" }, { "name": "FEDORA-2019-18cf104b5d", "refsource": "FEDORA", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/" }, { "name": "FEDORA-2019-7fac263417", "refsource": "FEDORA", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/" }, { "name": "[debian-lts-announce] 20210526 [SECURITY] [DLA 2667-1] djvulibre security update", "refsource": "MLIST", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html" }, { "name": "DSA-5032", "refsource": "DEBIAN", "tags": [ "Third Party Advisory" ], "url": "https://www.debian.org/security/2021/dsa-5032" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6 } }, "lastModifiedDate": "2022-03-29T19:37Z", "publishedDate": "2019-11-07T06:15Z" } } }
ghsa-mgvj-94j9-x737
Vulnerability from github
Published
2022-05-24 17:00
Modified
2022-05-24 17:00
Severity ?
VLAI Severity ?
Details
DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
{ "affected": [], "aliases": [ "CVE-2019-18804" ], "database_specific": { "cwe_ids": [ "CWE-476" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2019-11-07T06:15:00Z", "severity": "MODERATE" }, "details": "DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.", "id": "GHSA-mgvj-94j9-x737", "modified": "2022-05-24T17:00:38Z", "published": "2022-05-24T17:00:38Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18804" }, { "type": "WEB", "url": "https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md" }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html" }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF" }, { "type": "WEB", "url": "https://sourceforge.net/p/djvu/bugs/309" }, { "type": "WEB", "url": "https://usn.ubuntu.com/4198-1" }, { "type": "WEB", "url": "https://www.debian.org/security/2021/dsa-5032" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…