tocsin

Alpine/xpdf: high 7.8

There is a use-after-free issue in JBIG2Stream::close() located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to (for example) the pdfimages binary. It allows an at

Action: Upgrade xpdf to 4.05-r0 or later.

Affected

introducedfixedlast affected
04.05-r0-

Fixed versions

4.05-r0

Sources

published · modified · JSON