Branch p11 update bulletin.

Package qt6-base updated to version 6.7.2-alt6 for branch p11 in task 365234.

Оключение tls в qt6.6

Package mupdf updated to version 1.25.2-alt1 for branch p11 in task 365407.

Published: 2021-02-24
Modified: 2024-11-21

CVE-2021-3407

A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences.

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References:

Published: 2021-07-22
Modified: 2024-11-21

CVE-2021-37220

MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input.

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References:

Published: 2022-08-26
Modified: 2024-11-21

CVE-2021-4216

A Floating point exception (division-by-zero) flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream.

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References:

Version: 2.1.1

Branch p11 update on 2024-12-21

ALT-BU-2024-17402-1

ALT-PU-2024-17189-2

Closed bugs

Bug #48923

ALT-PU-2024-17298-2

Closed vulnerabilities

CVE-2021-3407

CVE-2021-37220

CVE-2021-4216