#1034155 ippsample: CVE-2023-28428

Package:
src:ippsample
Source:
src:ippsample
Submitter:
Salvatore Bonaccorso
Date:
2023-04-10 12:42:04 UTC
Severity:
normal
Tags:
#1034155#5
Date:
2023-04-10 12:38:05 UTC
From:
To:
Hi,

The following vulnerability was published for ippsample.

CVE-2023-28428[0]:
| PDFio is a C library for reading and writing PDF files. In versions
| 1.1.0 and prior, a denial of service vulnerability exists in the pdfio
| parser. Crafted pdf files can cause the program to run at 100%
| utilization and never terminate. This is different from
| CVE-2023-24808. A patch for this issue is available in version 1.1.1.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2023-28428
https://www.cve.org/CVERecord?id=CVE-2023-28428
[1] https://github.com/michaelrsweet/pdfio/commit/97d4955666779dc5b0665e15dd951a5c12426a31
[2] https://github.com/michaelrsweet/pdfio/security/advisories/GHSA-68x8-9phf-j7jf

Regards,
Salvatore