MGASA-2018-0131
- Source
- https://advisories.mageia.org/MGASA-2018-0131.html
- Import Source
- https://advisories.mageia.org/MGASA-2018-0131.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2018-0131
- Published
- 2018-02-22T19:49:44Z
- Modified
- 2026-04-16T04:27:00Z
- Summary
- Updated qpdf packages fix security vulnerability
- Details
-
Qpdf has been updated to the latest version to fix several security issues.
- Stack overflow due to endless recursion in QPDFTokenizer::resolveLiteral()
- Another stack overflow / endless recursion in QPDFWriter::enqueueObject()
- Stack out of bounds read in iterate_rc4()
- heap out of bounds read (large) in Pl_Buffer::write
- Hang due to a pdf xref loop Also, the cups-filters package has been rebuilt for the new qpdf.
- References
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:6 / qpdf
Package
- Name
- qpdf
- Purl
- pkg:rpm/mageia/qpdf?arch=source&distro=mageia-6
Mageia:6 / cups-filters
Package
- Name
- cups-filters
- Purl
- pkg:rpm/mageia/cups-filters?arch=source&distro=mageia-6