ELA-188-1 djvulibre security update

NULL pointer dereference

2019-11-10
Packagedjvulibre
Version3.5.25.3-1+deb7u2
Related CVEs CVE-2019-18804


It was discovered that there was a NULL pointer dereference issue in the IW44 encoder/decoder within DjVu, a set of compression technologies, a file format, and a software platform for the delivery over the Web of digital documents.



For Debian 7 Wheezy, these problems have been fixed in version 3.5.25.3-1+deb7u2.

We recommend that you upgrade your djvulibre packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.