A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu file may lead to application crash and other consequences.
{ "binaries": [ { "binary_name": "djview", "binary_version": "3.5.27.1-5ubuntu0.1+esm1" }, { "binary_name": "djview-dbgsym", "binary_version": "3.5.27.1-5ubuntu0.1+esm1" }, { "binary_name": "djview3", "binary_version": "3.5.27.1-5ubuntu0.1+esm1" }, { "binary_name": "djview3-dbgsym", "binary_version": "3.5.27.1-5ubuntu0.1+esm1" }, { "binary_name": "djvulibre-bin", "binary_version": "3.5.27.1-5ubuntu0.1+esm1" }, { "binary_name": "djvulibre-bin-dbgsym", "binary_version": "3.5.27.1-5ubuntu0.1+esm1" }, { "binary_name": "djvulibre-dbg", "binary_version": "3.5.27.1-5ubuntu0.1+esm1" }, { "binary_name": "djvulibre-desktop", "binary_version": "3.5.27.1-5ubuntu0.1+esm1" }, { "binary_name": "djvuserve", "binary_version": "3.5.27.1-5ubuntu0.1+esm1" }, { "binary_name": "djvuserve-dbgsym", "binary_version": "3.5.27.1-5ubuntu0.1+esm1" }, { "binary_name": "libdjvulibre-dev", "binary_version": "3.5.27.1-5ubuntu0.1+esm1" }, { "binary_name": "libdjvulibre-dev-dbgsym", "binary_version": "3.5.27.1-5ubuntu0.1+esm1" }, { "binary_name": "libdjvulibre-text", "binary_version": "3.5.27.1-5ubuntu0.1+esm1" }, { "binary_name": "libdjvulibre21", "binary_version": "3.5.27.1-5ubuntu0.1+esm1" }, { "binary_name": "libdjvulibre21-dbgsym", "binary_version": "3.5.27.1-5ubuntu0.1+esm1" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "djview", "binary_version": "3.5.27.1-8ubuntu0.3" }, { "binary_name": "djview3", "binary_version": "3.5.27.1-8ubuntu0.3" }, { "binary_name": "djvulibre-bin", "binary_version": "3.5.27.1-8ubuntu0.3" }, { "binary_name": "djvulibre-bin-dbgsym", "binary_version": "3.5.27.1-8ubuntu0.3" }, { "binary_name": "djvulibre-desktop", "binary_version": "3.5.27.1-8ubuntu0.3" }, { "binary_name": "djvuserve", "binary_version": "3.5.27.1-8ubuntu0.3" }, { "binary_name": "djvuserve-dbgsym", "binary_version": "3.5.27.1-8ubuntu0.3" }, { "binary_name": "libdjvulibre-dev", "binary_version": "3.5.27.1-8ubuntu0.3" }, { "binary_name": "libdjvulibre-text", "binary_version": "3.5.27.1-8ubuntu0.3" }, { "binary_name": "libdjvulibre21", "binary_version": "3.5.27.1-8ubuntu0.3" }, { "binary_name": "libdjvulibre21-dbgsym", "binary_version": "3.5.27.1-8ubuntu0.3" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "djview", "binary_version": "3.5.27.1-14ubuntu0.1" }, { "binary_name": "djview3", "binary_version": "3.5.27.1-14ubuntu0.1" }, { "binary_name": "djvulibre-bin", "binary_version": "3.5.27.1-14ubuntu0.1" }, { "binary_name": "djvulibre-bin-dbgsym", "binary_version": "3.5.27.1-14ubuntu0.1" }, { "binary_name": "djvulibre-desktop", "binary_version": "3.5.27.1-14ubuntu0.1" }, { "binary_name": "djvuserve", "binary_version": "3.5.27.1-14ubuntu0.1" }, { "binary_name": "djvuserve-dbgsym", "binary_version": "3.5.27.1-14ubuntu0.1" }, { "binary_name": "libdjvulibre-dev", "binary_version": "3.5.27.1-14ubuntu0.1" }, { "binary_name": "libdjvulibre-text", "binary_version": "3.5.27.1-14ubuntu0.1" }, { "binary_name": "libdjvulibre21", "binary_version": "3.5.27.1-14ubuntu0.1" }, { "binary_name": "libdjvulibre21-dbgsym", "binary_version": "3.5.27.1-14ubuntu0.1" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }