Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bf0cf258 by Salvatore Bonaccorso at 2018-10-02T15:42:50Z
Record version entering unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -24882,7 +24882,7 @@ CVE-2018-8002 (In PoDoFo 0.9.5, there exists an
infinite loop vulnerability in .
NOTE: PoC https://bugzilla.redhat.com/show_bug.cgi?id=1548930
NOTE: Upstream bug: https://sourceforge.net/p/podofo/tickets/15/
CVE-2018-8001 (In PoDoFo 0.9.5, there exists a heap-based buffer over-read ...)
- - libpodofo 0.9.6~rc1+dfsg-1 (low; bug #892556)
+ - libpodofo 0.9.6+dfsg-3 (low; bug #892556)
[stretch] - libpodofo <no-dsa> (Minor issue)
[jessie] - libpodofo <no-dsa> (Minor issue)
[wheezy] - libpodofo <no-dsa> (Minor issue)
@@ -33481,7 +33481,7 @@ CVE-2018-5311 (The Easy Custom Auto Excerpt plugin
2.4.6 for WordPress has XSS v
CVE-2018-5310 (In the "Media from FTP" plugin before 9.85 for
WordPress, Directory ...)
NOT-FOR-US: "Media from FTP" plugin for WordPress
CVE-2018-5309 (In PoDoFo 0.9.5, there is an integer overflow in the ...)
- - libpodofo 0.9.6~rc1+dfsg-1 (low)
+ - libpodofo 0.9.6+dfsg-3 (low)
[stretch] - libpodofo <no-dsa> (Minor issue)
[jessie] - libpodofo <no-dsa> (Minor issue)
[wheezy] - libpodofo <no-dsa> (Minor issue)
@@ -33559,7 +33559,7 @@ CVE-2018-5298 (In the Procter & Gamble "Oral-B
App" (aka com.pg.or
CVE-2018-5297
RESERVED
CVE-2018-5296 (In PoDoFo 0.9.5, there is an uncontrolled memory allocation in
the ...)
- - libpodofo 0.9.6+dfsg-1 (low)
+ - libpodofo 0.9.6+dfsg-3 (low)
[stretch] - libpodofo <no-dsa> (Minor issue)
[jessie] - libpodofo <no-dsa> (Minor issue)
[wheezy] - libpodofo <no-dsa> (Minor issue)
@@ -76004,7 +76004,7 @@ CVE-2017-8054 (The function
PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cp
NOTE: ... and re-fixed in: https://sourceforge.net/p/podofo/code/1882
NOTE: and https://sourceforge.net/p/podofo/code/1883
CVE-2017-8053 (PoDoFo 0.9.5 allows denial of service (infinite recursion and
stack ...)
- - libpodofo 0.9.6+dfsg-1 (bug #860994)
+ - libpodofo 0.9.6+dfsg-3 (bug #860994)
[stretch] - libpodofo <no-dsa> (Minor issue)
[jessie] - libpodofo <no-dsa> (Minor issue)
[wheezy] - libpodofo <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/bf0cf258f73cefebd23eb4df61f62b8c126df518
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/bf0cf258f73cefebd23eb4df61f62b8c126df518
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
