[ GLSA 201811-15 ] MuPDF

[GLSA]

Gentoo Linux Security Advisory

Title: MuPDF: Multiple vulnerabilities (GLSA 201811-15)
Severity: normal
Exploitable: remote
Date: 2018-11-26
Bug(s): #634678, #646010, #651828, #658618
ID: 201811-15

Synopsis

Multiple vulnerabilities have been found in MuPDF, the worst of
which could allow the remote execution of arbitrary code.


Background

A lightweight PDF, XPS, and E-book viewer.

Affected Packages

Package: app-text/mupdf
Vulnerable: < 1.13.0
Unaffected: >= 1.13.0
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in MuPDF. Please review
the CVE identifiers referenced below for details.


Impact

A remote attacker, by enticing a user to process a specially crafted
file, could possibly execute arbitrary code, cause a Denial of Service
condition, or have other unspecified impacts.


Workaround

There is no known workaround at this time.

Resolution

All MuPDF users should upgrade to the latest version: