Security update for podofo

Announcement ID:	SUSE-SU-2024:3550-1
Release Date:	2024-10-08T14:08:01Z
Rating:	moderate
References:	bsc#1023072 bsc#1023190 bsc#1027776 bsc#1027779 bsc#1027785 bsc#1027786 bsc#1027787 bsc#1037000 bsc#1075322 bsc#1084894
Cross-References:	CVE-2015-8981 CVE-2017-6840 CVE-2017-6841 CVE-2017-6842 CVE-2017-6845 CVE-2017-6849 CVE-2017-8378 CVE-2018-5309 CVE-2018-8001
CVSS scores:	CVE-2017-6840 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-6841 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-6842 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-6845 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-6849 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2017-6849 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8378 ( SUSE ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2017-8378 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-5309 ( SUSE ): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2018-5309 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-8001 ( SUSE ): 5.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2018-8001 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products:	openSUSE Leap 15.3 openSUSE Leap 15.5 openSUSE Leap 15.6 SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Desktop 15 SP6 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Real Time 15 SP5 SUSE Linux Enterprise Real Time 15 SP6 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Package Hub 15 15-SP5 SUSE Package Hub 15 15-SP6

An update that solves nine vulnerabilities and has one security fix can now be installed.

Description:

This update for podofo fixes the following issues:

• CVE-2015-8981: Fixed heap overflow in the function ReadXRefSubsection (bsc#1023190)
• CVE-2017-6840: Fixed invalid memory read in ColorChanger::GetColorFromStack (colorchanger.cpp) (bsc#1027787)
• CVE-2017-6841: Fixed NULL pointer dereference in GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement (graphicsstack.h) (bsc#1027786)
• CVE-2017-6842: Fixed NULL pointer dereference in ColorChanger::GetColorFromStack (colorchanger.cpp) (bsc#1027785)
• CVE-2017-6845: Fixed NULL pointer dereference in GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace (graphicsstack.h) (bsc#1027779)
• CVE-2017-6849: Fixed NULL pointer dereference in PoDoFo::PdfColorGray::~PdfColorGray (PdfColor.cpp) (bsc#1027776)

• CVE-2017-8378: Fixed denial of service (application crash) vectors related to m_offsets.size (PdfParser::ReadObjects func in base/PdfParser.cpp) (bsc#1037000)

• Fixed NULL pointer dereference in PdfInfo::GuessFormat (pdfinfo.cpp) (bsc#1023072)

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• openSUSE Leap 15.3
  zypper in -t patch SUSE-2024-3550=1
• openSUSE Leap 15.5
  zypper in -t patch openSUSE-SLE-15.5-2024-3550=1
• openSUSE Leap 15.6
  zypper in -t patch openSUSE-SLE-15.6-2024-3550=1
• SUSE Package Hub 15 15-SP5
  zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3550=1
• SUSE Package Hub 15 15-SP6
  zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3550=1

Package List:

• openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586)
  • podofo-debugsource-0.9.6-150300.3.15.1
  • libpodofo0_9_6-0.9.6-150300.3.15.1
  • podofo-debuginfo-0.9.6-150300.3.15.1
  • libpodofo0_9_6-debuginfo-0.9.6-150300.3.15.1
  • podofo-0.9.6-150300.3.15.1
  • libpodofo-devel-0.9.6-150300.3.15.1
• openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64)
  • podofo-debugsource-0.9.6-150300.3.15.1
  • libpodofo0_9_6-0.9.6-150300.3.15.1
  • podofo-debuginfo-0.9.6-150300.3.15.1
  • libpodofo0_9_6-debuginfo-0.9.6-150300.3.15.1
  • podofo-0.9.6-150300.3.15.1
  • libpodofo-devel-0.9.6-150300.3.15.1
• openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)
  • podofo-debugsource-0.9.6-150300.3.15.1
  • libpodofo0_9_6-0.9.6-150300.3.15.1
  • podofo-debuginfo-0.9.6-150300.3.15.1
  • libpodofo0_9_6-debuginfo-0.9.6-150300.3.15.1
  • podofo-0.9.6-150300.3.15.1
  • libpodofo-devel-0.9.6-150300.3.15.1
• SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64)
  • podofo-debugsource-0.9.6-150300.3.15.1
  • libpodofo0_9_6-0.9.6-150300.3.15.1
  • podofo-debuginfo-0.9.6-150300.3.15.1
  • libpodofo0_9_6-debuginfo-0.9.6-150300.3.15.1
  • podofo-0.9.6-150300.3.15.1
  • libpodofo-devel-0.9.6-150300.3.15.1
• SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64)
  • podofo-debugsource-0.9.6-150300.3.15.1
  • libpodofo0_9_6-0.9.6-150300.3.15.1
  • podofo-debuginfo-0.9.6-150300.3.15.1
  • libpodofo0_9_6-debuginfo-0.9.6-150300.3.15.1
  • podofo-0.9.6-150300.3.15.1
  • libpodofo-devel-0.9.6-150300.3.15.1

References:

• https://www.suse.com/security/cve/CVE-2015-8981.html
• https://www.suse.com/security/cve/CVE-2017-6840.html
• https://www.suse.com/security/cve/CVE-2017-6841.html
• https://www.suse.com/security/cve/CVE-2017-6842.html
• https://www.suse.com/security/cve/CVE-2017-6845.html
• https://www.suse.com/security/cve/CVE-2017-6849.html
• https://www.suse.com/security/cve/CVE-2017-8378.html
• https://www.suse.com/security/cve/CVE-2018-5309.html
• https://www.suse.com/security/cve/CVE-2018-8001.html
• https://bugzilla.suse.com/show_bug.cgi?id=1023072
• https://bugzilla.suse.com/show_bug.cgi?id=1023190
• https://bugzilla.suse.com/show_bug.cgi?id=1027776
• https://bugzilla.suse.com/show_bug.cgi?id=1027779
• https://bugzilla.suse.com/show_bug.cgi?id=1027785
• https://bugzilla.suse.com/show_bug.cgi?id=1027786
• https://bugzilla.suse.com/show_bug.cgi?id=1027787
• https://bugzilla.suse.com/show_bug.cgi?id=1037000
• https://bugzilla.suse.com/show_bug.cgi?id=1075322
• https://bugzilla.suse.com/show_bug.cgi?id=1084894