Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker
Commits: 4c1804fe by Emilio Pozuelo Monfort at 2019-01-15T12:39:54Z poppler no-dsa on jessie - - - - - 2 changed files: - data/CVE/list - data/dla-needed.txt Changes: ===================================== data/CVE/list ===================================== @@ -5707,6 +5707,7 @@ CVE-2018-20663 (The Reporting Addon (aka Reports Addon) through 2019-01-02 for C NOT-FOR-US: Reporting Addon for CUBA Platform CVE-2018-20662 (In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause ...) - poppler <unfixed> (bug #918158) + [jessie] - poppler <postponed> (Minor issue) NOTE: https://gitlab.freedesktop.org/poppler/poppler/issues/706 NOTE: Initial approach of fixing the issue via NOTE: https://gitlab.freedesktop.org/poppler/poppler/commit/9fd5ec0e6e5f763b190f2a55ceb5427cfe851d5f @@ -5932,6 +5933,7 @@ CVE-2018-20651 (A NULL pointer dereference was discovered in ...) NOTE: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=54025d5812ff100f5f0654eb7e1ffd50f2e37f5f CVE-2018-20650 (A reachable Object::dictLookup assertion in Poppler 0.72.0 allows ...) - poppler <unfixed> (bug #917974) + [jessie] - poppler <postponed> (Minor issue) NOTE: https://gitlab.freedesktop.org/poppler/poppler/commit/de0c0b8324e776f0b851485e0fc9622fc35695b7 NOTE: https://gitlab.freedesktop.org/poppler/poppler/issues/704 CVE-2018-20649 ===================================== data/dla-needed.txt ===================================== @@ -93,8 +93,6 @@ policykit-1 (Emilio) NOTE: 20181207: jessie vulnerable to CVE-2018-19788? unable to reproduce systemctl poc (Santiago) NOTE: 20181230: needs source code analysis -- -poppler (Emilio) --- python3.4 (Brian May) NOTE: 20181225: The update should include also the postponed and no-dsa NOTE: issues which were already fixed by us in Wheezy. (apo) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4c1804fe2cd141c5c879c4738986a8596a707070 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4c1804fe2cd141c5c879c4738986a8596a707070 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits