Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
48b1da0f by Salvatore Bonaccorso at 2018-04-30T07:01:22+02:00
Three mupdf issues fixed in unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -11490,7 +11490,7 @@ CVE-2018-6194 (A cross-site scripting (XSS)
vulnerability in ...)
CVE-2018-6193 (A Cross-Site Scripting (XSS) vulnerability was found in
Routers2 2.24, ...)
NOT-FOR-US: Routers2
CVE-2018-6192 (In Artifex MuPDF 1.12.0, the pdf_read_new_xref function in ...)
- - mupdf <unfixed> (bug #888487)
+ - mupdf 1.13.0+ds1-1 (bug #888487)
[stretch] - mupdf <no-dsa> (Minor issue)
[jessie] - mupdf <no-dsa> (Minor issue)
[wheezy] - mupdf <no-dsa> (Minor issue)
@@ -11536,7 +11536,7 @@ CVE-2018-6188
(django.contrib.auth.forms.AuthenticationForm in Django 2.0 before
[wheezy] - python-django <not-affected> (Issue introduced in 1.11.8 and
2.0)
NOTE:
https://www.djangoproject.com/weblog/2018/feb/01/security-releases/
CVE-2018-6187 (In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow
...)
- - mupdf <unfixed> (bug #888464)
+ - mupdf 1.13.0+ds1-1 (bug #888464)
[stretch] - mupdf <no-dsa> (Minor issue)
[jessie] - mupdf <no-dsa> (Minor issue)
[wheezy] - mupdf <ignored> (Most likely not affected, minor issue)
@@ -13218,7 +13218,7 @@ CVE-2018-5688 (ILIAS before 5.2.4 has XSS via the cmd
parameter to the displayHe
CVE-2018-5687 (NewsBee allows XSS via the Company Name field in the Settings
under ...)
NOT-FOR-US: NewsBee CMS
CVE-2018-5686 (In MuPDF 1.12.0, there is an infinite loop vulnerability and
...)
- - mupdf <unfixed> (bug #887130)
+ - mupdf 1.13.0+ds1-1 (bug #887130)
[stretch] - mupdf <no-dsa> (Minor issue)
[jessie] - mupdf <no-dsa> (Minor issue)
[wheezy] - mupdf <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/48b1da0fa089d1402c9cc3056693ee2f4084124a
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/48b1da0fa089d1402c9cc3056693ee2f4084124a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
