Test ID:	1.3.6.1.4.1.25623.1.0.856268
Category:	openSUSE Local Security Checks
Title:	openSUSE Security Advisory (SUSE-SU-2024:2137-1)
Summary:	The remote host is missing an update for the 'podofo' package(s) announced via the SUSE-SU-2024:2137-1 advisory.
Description:	Summary: The remote host is missing an update for the 'podofo' package(s) announced via the SUSE-SU-2024:2137-1 advisory. Vulnerability Insight: This update for podofo fixes the following issues: - CVE-2019-9199: Fixed a NULL pointer dereference in podofoimpose (bsc#1127855) - CVE-2018-20797: Fixed an excessive memory allocation in PoDoFo:podofo_calloc (bsc#1127514) - CVE-2019-10723: Fixed a memory leak in PdfPagesTreeCache (bsc#1131544) Affected Software/OS: 'podofo' package(s) on openSUSE Leap 15.5, openSUSE Leap 15.6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-20797 https://sourceforge.net/p/podofo/tickets/34/ Common Vulnerability Exposure (CVE) ID: CVE-2019-10723 https://sourceforge.net/p/podofo/tickets/46/ Common Vulnerability Exposure (CVE) ID: CVE-2019-9199 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTJ5AAM6Y4NMSELEH7N5ZG4DNO56BCYF/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIC2EXSSMBT3MY2HY42IIY4BUQS2SVYB/ https://github.com/jjanku/podofo/commit/ada821df68fb0bf673840ed525daf4ec709dbfd9 https://github.com/mksdev/podofo/commit/1400a9aaf611299b9a56aa2abeb158918b9743c8 https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-setsource-podofo-0-9-6-trunk-r1967/ https://sourceforge.net/p/podofo/tickets/40/
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.