USN-4957-2: DjVuLibre vulnerabilities
18 May 2021
Several security issues were fixed in DjVuLibre.
Releases
Packages
- djvulibre - DjVu image format library and tools
Details
USN-4957-1 fixed several vulnerabilities in DjVuLibre. This update provides
the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that DjVuLibre incorrectly handled certain memory
operations. If a user or automated system were tricked into processing a
specially crafted DjVu file, a remote attacker could cause applications
to hang or crash, resulting in a denial of service, or possibly execute
arbitrary code.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
libdjvulibre21
-
3.5.27.1-5ubuntu0.1+esm1
Available with Ubuntu Pro
After a standard system update you need to reboot your computer to make
all the necessary changes.