Debian Libpodofo vulnerabilities

CVE-2017-5852 [MEDIUM] CVE-2017-5852: libpodofo - The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp i... The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted file. Scope: local bookworm: resolved (fixed in 0.9.5-7) bullseye: resolved (fixed in 0.9.5-7) forky: resolved (fixed in 0.9.5-7) sid: resolved (fixed in 0.9.5-7) trixie: resolved (fixed i

CVE-2015-8981 [CRITICAL] CVE-2015-8981: libpodofo - Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base... Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vectors related to m_offsets.size. Scope: local bookworm: resolved (fixed in 0.9.4-1) bullseye: resolved (fixed in 0.9.4-1) forky: resolved (fixed in 0.9.4-1) sid: resolved (fixed in 0.9.4-1) trixie: resolved (f