Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 166b17d6 by Salvatore Bonaccorso at 2018-05-24T22:25:51+02:00 Add CVE-2018-1000038/mupdf, fixed in 1.13.0+ds1-1 (upstream 1.13.0) - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -12665,7 +12665,10 @@ CVE-2018-1000039 (In MuPDF 1.12.0 and earlier, multiple heap use after free bugs NOTE: http://git.ghostscript.com/?p=mupdf.git;a=commitdiff;h=71ceebcf56e682504da22c4035b39a2d451e8ffd;hp=7f82c01523505052615492f8e220f4348ba46995 NOTE: http://git.ghostscript.com/?p=mupdf.git;a=commitdiff;h=f597300439e62f5e921f0d7b1e880b5c1a1f1607;hp=093fc3b098dc5fadef5d8ad4b225db9fb124758b CVE-2018-1000038 (In MuPDF 1.12.0 and earlier, a stack buffer overflow in function ...) - TODO: check + - mupdf 1.13.0+ds1-1 + NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5494 + NOTE: http://git.ghostscript.com/?p=mupdf.git;a=commitdiff;h=71ceebcf56e682504da22c4035b39a2d451e8ffd;hp=7f82c01523505052615492f8e220f4348ba46995 + NOTE: http://git.ghostscript.com/?p=mupdf.git;a=commitdiff;h=f597300439e62f5e921f0d7b1e880b5c1a1f1607;hp=093fc3b098dc5fadef5d8ad4b225db9fb124758b CVE-2018-1000037 (In MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF ...) TODO: check CVE-2018-1000036 (In MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/166b17d645822506b435e6bac4a564c5dd30323e -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/166b17d645822506b435e6bac4a564c5dd30323e You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits