[ GLSA 201706-08 ] MuPDF

[GLSA]

Gentoo Linux Security Advisory

Title: MuPDF: Multiple vulnerabilities (GLSA 201706-08)
Severity: normal
Exploitable: remote
Date: 2017-06-06
Bug(s): #611444, #614044, #614852
ID: 201706-08

Synopsis

Multiple vulnerabilities have been found in MuPDF, the worst of
which allows remote attackers to cause a Denial of Service condition or
have other unspecified impact.


Background

A lightweight PDF, XPS, and E-book viewer.

Affected Packages

Package: app-text/mupdf
Vulnerable: < 1.11-r1
Unaffected: >= 1.11-r1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in MuPDF. Please review
the CVE identifiers referenced below for details.


Impact

A remote attacker could entice a user to process a specially crafted PDF
document or image using MuPDF, possibly resulting in a Denial of Service
condition or have other unspecified impact.


Workaround

There is no known workaround at this time.

Resolution

All MuPDF users should upgrade to the latest version: