portage-ng / portage / app-text / mupdf / 1.27.2
portage-ng glsa
6 advisories reference app-text/mupdf · none place version 1.27.2 in a vulnerable range
▸ GLSA 202408-29 MuPDF: Multiple Vulnerabilities this version unaffected normal local 2024-08-12

Multiple vulnerabilities have been discovered in MuPDF, the worst of which could lead to arbitrary code execution.

Announced
2024-08-12
Revised
2024-08-12
Access
local
Bugs
#803305
Advisory
https://security.gentoo.org/glsa/202408-29

Affected packages

PackageArchVulnerableUnaffected
app-text/mupdf*< 1.20.0>= 1.20.0

Background

A lightweight PDF, XPS, and E-book viewer.

Description

Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All MuPDF users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-text/mupdf-1.20.0"

References

▸ GLSA 202105-30 MuPDF: Multiple vulnerabilities this version unaffected low local, remote 2021-05-26

Multiple vulnerabilities have been found in MuPDF, the worst of which could result in a Denial of Service condition.

Announced
2021-05-26
Revised
2021-05-26
Access
local, remote
Bugs
#747151 #772311
Advisory
https://security.gentoo.org/glsa/202105-30

Affected packages

PackageArchVulnerableUnaffected
app-text/mupdf*< 1.18.0-r3>= 1.18.0-r3

Background

MuPDF is a lightweight PDF viewer and toolkit written in portable C.

Description

Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted PDF document using MuPDF, possibly resulting in a Denial of Service condition or have other unspecified impact.

Workaround

There is no known workaround at this time.

Resolution

All MuPDF users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-text/mupdf-1.18.0-r3"

References

▸ GLSA 201811-15 MuPDF: Multiple vulnerabilities this version unaffected normal remote 2018-11-26

Multiple vulnerabilities have been found in MuPDF, the worst of which could allow the remote execution of arbitrary code.

Announced
2018-11-26
Revised
2018-11-26
Access
remote
Bugs
#634678 #646010 #651828 #658618
Advisory
https://security.gentoo.org/glsa/201811-15

Affected packages

PackageArchVulnerableUnaffected
app-text/mupdf*< 1.13.0>= 1.13.0

Background

A lightweight PDF, XPS, and E-book viewer.

Description

Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker, by enticing a user to process a specially crafted file, could possibly execute arbitrary code, cause a Denial of Service condition, or have other unspecified impacts.

Workaround

There is no known workaround at this time.

Resolution

All MuPDF users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-text/mupdf-1.13.0"

References

▸ GLSA 201706-08 MuPDF: Multiple vulnerabilities this version unaffected normal remote 2017-06-06

Multiple vulnerabilities have been found in MuPDF, the worst of which allows remote attackers to cause a Denial of Service condition or have other unspecified impact.

Announced
2017-06-06
Revised
2017-06-06
Access
remote
Bugs
#611444 #614044 #614852
Advisory
https://security.gentoo.org/glsa/201706-08

Affected packages

PackageArchVulnerableUnaffected
app-text/mupdf*< 1.11-r1>= 1.11-r1

Background

A lightweight PDF, XPS, and E-book viewer.

Description

Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could entice a user to process a specially crafted PDF document or image using MuPDF, possibly resulting in a Denial of Service condition or have other unspecified impact.

Workaround

There is no known workaround at this time.

Resolution

All MuPDF users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-text/mupdf-1.11-r1"

References

▸ GLSA 201702-12 MuPDF: Multiple vulnerabilities this version unaffected normal remote 2017-02-19

Multiple vulnerabilities have been found in MuPDF, the worst of which allows remote attackers to execute arbitrary code.

Announced
2017-02-19
Revised
2017-02-19
Access
remote
Bugs
#589826 #590480 #608702 #608712
Advisory
https://security.gentoo.org/glsa/201702-12

Affected packages

PackageArchVulnerableUnaffected
app-text/mupdf*< 1.10a-r1>= 1.10a-r1

Background

A lightweight PDF, XPS, and E-book viewer.

Description

Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted PDF document using MuPDF possibly resulting in the execution of arbitrary code, with the privileges of the process, or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All MuPDF users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-text/mupdf-1.10a-r1"

References

▸ GLSA 201412-43 MuPDF: User-assisted execution of arbitrary code this version unaffected normal remote 2014-12-26

Multiple vulnerabilities have been found in MuPDF, possibly resulting in remote code execution or Denial of Service.

Announced
2014-12-26
Revised
2014-12-26
Access
remote
Bugs
#358029 #498876
Advisory
https://security.gentoo.org/glsa/201412-43

Affected packages

PackageArchVulnerableUnaffected
app-text/mupdf*< 1.3_p20140118>= 1.3_p20140118

Background

MuPDF is a lightweight PDF viewer and toolkit written in portable C.

Description

Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifier and Secunia Research referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted PDF using MuPDF, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All MuPDF users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-text/mupdf-1.3_p20140118"

References