[Git][security-tracker-team/security-tracker][master] poppler no-dsa
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 87260258 by Moritz Muehlenhoff at 2018-05-17T18:00:17+02:00 poppler no-dsa - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list = --- a/data/CVE/list +++ b/data/CVE/list @@ -603,6 +603,8 @@ CVE-2018-10946 RESERVED CVE-2017-18267 (The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler ...) - poppler (bug #898357) + [stretch] - poppler (Minor issue) + [jessie] - poppler (Minor issue) [wheezy] - poppler (Minor issue) NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=104942 NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=103238 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8726025817c0b4c7d12ffc7244f7a0ba9e23cdb3 --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8726025817c0b4c7d12ffc7244f7a0ba9e23cdb3 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] poppler no-dsa
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: d5a3b9fd by Moritz Muehlenhoff at 2018-09-28T18:47:33Z poppler no-dsa - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list = @@ -2092,7 +2092,8 @@ CVE-2018-16647 (In Artifex MuPDF 1.13.0, the pdf_get_xref_entry function in ...) [jessie] - mupdf (Minor issue) NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=699686 CVE-2018-16646 (In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause ...) - - poppler (bug #909802) + - poppler (low; bug #909802) + [stretch] - poppler (Minor issue) NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1622951 NOTE: Proposed fix: https://gitlab.freedesktop.org/poppler/poppler/merge_requests/67 TODO: check, reporter did only report to Red Hat so far, few details View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d5a3b9fdc579aba7d95b11f77909e16c2209f46a -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d5a3b9fdc579aba7d95b11f77909e16c2209f46a You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] poppler no-dsa on jessie
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 4c1804fe by Emilio Pozuelo Monfort at 2019-01-15T12:39:54Z poppler no-dsa on jessie - - - - - 2 changed files: - data/CVE/list - data/dla-needed.txt Changes: = data/CVE/list = @@ -5707,6 +5707,7 @@ CVE-2018-20663 (The Reporting Addon (aka Reports Addon) through 2019-01-02 for C NOT-FOR-US: Reporting Addon for CUBA Platform CVE-2018-20662 (In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause ...) - poppler (bug #918158) + [jessie] - poppler (Minor issue) NOTE: https://gitlab.freedesktop.org/poppler/poppler/issues/706 NOTE: Initial approach of fixing the issue via NOTE: https://gitlab.freedesktop.org/poppler/poppler/commit/9fd5ec0e6e5f763b190f2a55ceb5427cfe851d5f @@ -5932,6 +5933,7 @@ CVE-2018-20651 (A NULL pointer dereference was discovered in ...) NOTE: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=54025d5812ff100f5f0654eb7e1ffd50f2e37f5f CVE-2018-20650 (A reachable Object::dictLookup assertion in Poppler 0.72.0 allows ...) - poppler (bug #917974) + [jessie] - poppler (Minor issue) NOTE: https://gitlab.freedesktop.org/poppler/poppler/commit/de0c0b8324e776f0b851485e0fc9622fc35695b7 NOTE: https://gitlab.freedesktop.org/poppler/poppler/issues/704 CVE-2018-20649 = data/dla-needed.txt = @@ -93,8 +93,6 @@ policykit-1 (Emilio) NOTE: 20181207: jessie vulnerable to CVE-2018-19788? unable to reproduce systemctl poc (Santiago) NOTE: 20181230: needs source code analysis -- -poppler (Emilio) --- python3.4 (Brian May) NOTE: 20181225: The update should include also the postponed and no-dsa NOTE: issues which were already fixed by us in Wheezy. (apo) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4c1804fe2cd141c5c879c4738986a8596a707070 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4c1804fe2cd141c5c879c4738986a8596a707070 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
