Oval Definition:	oval:org.opensuse.security:def:65215
Revision Date: 2021-05-19 Version: 1 Title: Security update for djvulibre (Important) Description: This update for djvulibre fixes the following issues: - CVE-2021-32490 [bsc#1185895]: Out of bounds write in function DJVU:filter_bv() via crafted djvu file - CVE-2021-32491 [bsc#1185900]: Integer overflow in function render() in tools/ddjvu via crafted djvu file - CVE-2021-32492 [bsc#1185904]: Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file - CVE-2021-32493 [bsc#1185905]: Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file Family: unix Class: patch Status: Reference(s): 1174628 1174633 1174635 1174638 1185895 1185900 1185904 1185905 CVE-2020-14344 CVE-2020-14345 CVE-2020-14346 CVE-2020-14347 CVE-2021-32490 CVE-2021-32491 CVE-2021-32492 CVE-2021-32493 SUSE-SU-2020:2116-1 SUSE-SU-2020:2241-1 SUSE-SU-2021:1641-1 Platform(s): SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.1 SUSE Manager Server 4.1 Product(s): Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND Package Information libdjvulibre-devel-3.5.27-11.3.1 is installed OR libdjvulibre21-3.5.27-11.3.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information libxcb-1.13-3.5 is installed OR libxcb-render0-32bit-1.13-3.5 is installed OR libxcb-shm0-32bit-1.13-3.5 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed AND Package Information xorg-x11-server-1.20.3-14.5 is installed OR xorg-x11-server-sdk-1.20.3-14.5 is installed
BACK