Bug 1190176 - (CVE-2020-19609) VUL-1: CVE-2020-19609: mupdf: heap-based buffer overflow in tiff_expand_colormap() when parsing TIFF files
VUL-1: CVE-2020-19609: mupdf: heap-based buffer overflow in tiff_expand_color...
Status: NEW
Classification: Novell Products
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents
Other Other
: P4 - Low : Minor
: ---
Assigned To: Security Team bot
Security Team bot
Depends on:
  Show dependency treegraph
Reported: 2021-09-03 15:01 UTC by Marcus Meissner
Modified: 2021-10-11 19:33 UTC (History)
1 user (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Note You need to log in before you can comment on or make changes to this bug.
Comment 1 OBSbugzilla Bot 2021-09-20 18:40:11 UTC
This is an autogenerated message for OBS integration:
This bug (1190176) was mentioned in
https://build.opensuse.org/request/show/920347 15.2+Backports:SLE-15-SP1+Backports:SLE-15-SP2+Backports:SLE-15-SP3 / mupdf
Comment 2 Swamp Workflow Management 2021-10-11 19:33:42 UTC
openSUSE-SU-2021:1341-1: An update that fixes two vulnerabilities is now available.

Category: security (important)
Bug References: 1190175,1190176
CVE References: CVE-2020-16600,CVE-2020-19609
JIRA References: 
Sources used:
openSUSE Leap 15.2 (src):    mupdf-1.12.0-lp152.6.3.1
openSUSE Backports SLE-15-SP3 (src):    mupdf-1.12.0-bp153.2.3.1
openSUSE Backports SLE-15-SP2 (src):    mupdf-1.12.0-bp152.4.3.1
openSUSE Backports SLE-15-SP1 (src):    mupdf-1.12.0-bp151.4.3.1