Multiple vulnerabilities have been found in DjVu, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-text/djvu | * | < 3.5.27-r2 | >= 3.5.27-r2 |
DjVu is a web-centric format and software platform for distributing documents and images.
Multiple vulnerabilities have been discovered in DjVu. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All DjVu users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-text/djvu-3.5.27-r2"
A vulnerability in DjVu could result in execution of arbitrary code or Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-text/djvu | * | < 3.5.25.3 | >= 3.5.25.3 |
DjVu is a web-centric format and software platform for distributing documents and images.
A vulnerability has been discovered in DjVu. Please review the CVE identifier referenced below for details.
A remote attacker could entice a user to open a specially crafted DjVu file, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All DjVu users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-text/djvu-3.5.25.3"