Santiago R.R. pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0ff06891 by Santiago R.R at 2018-02-21T18:53:37+01:00
data/CVE/list: tag CVE-2018-7175/xpdf as not-affected
Signed-off-by: Santiago R.R <santiag...@riseup.net>
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -267,7 +267,7 @@ CVE-2018-7176 (FrontAccounting 2.4.3 suffers from a CSRF
flaw, which leads to ad
[wheezy] - frontaccounting <end-of-life> (unsupported in wheezy,
already vulnerable to SQL injection in CVE-2014-3973)
NOTE:
https://securitywarrior9.blogspot.ca/2018/02/cross-site-request-forgery-front.html
CVE-2018-7175 (An issue was discovered in xpdf 4.00. A NULL pointer
dereference in ...)
- - xpdf <unfixed> (unimportant)
+ - xpdf <not-affected> (xpdf links against poppler)
NOTE: https://forum.xpdfreader.com/viewtopic.php?f=3&t=613
NOTE: src:xpdf switched to use system poppler libary in 3.02-3
TODO: check, poppler
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0ff0689185bb5b6f46165784262222ceab8253da
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0ff0689185bb5b6f46165784262222ceab8253da
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
