Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits: 2c7c0644 by Chris Lamb at 2018-06-22T10:57:13+01:00 Add upstream commit for CVE-2017-9774/php-horde-image. - - - - - cb07daaa by Chris Lamb at 2018-06-22T11:14:20+01:00 Upstream patch for CVE-2017-9774/php-horde-image has a regression. See https://github.com/horde/Image/pull/1 - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -56686,6 +56686,8 @@ CVE-2017-9775 (Stack buffer overflow in GfxState.cc in pdftocairo in Poppler bef CVE-2017-9774 (Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a ...) - php-horde-image 2.5.1-1 (bug #865505) NOTE: https://lists.horde.org/archives/announce/2017/001234.html + NOTE: https://github.com/horde/horde/commit/01a11ccd37149101d67e0b20261fa48ab07dae13 + NOTE: Regression in upstream patch, fixing in https://github.com/horde/Image/pull/1 CVE-2017-9773 (Denial of Service was found in Horde_Image 2.x before 2.5.0 via a ...) - php-horde-image 2.5.1-1 (bug #865504) [jessie] - php-horde-image <not-affected> (Only Horde_Image above 2.3.0 affected) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/a578d79ef200a631f043cffc34c79b8485e47c9f...cb07daaa529edab0f534542abf0aff6b9a5de3ec -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/a578d79ef200a631f043cffc34c79b8485e47c9f...cb07daaa529edab0f534542abf0aff6b9a5de3ec You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
