Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
521295a2 by Salvatore Bonaccorso at 2023-06-29T08:49:12+02:00
Add CVE-2023-36464/pypdf

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -74,7 +74,11 @@ CVE-2023-3330 (Improper Limitation of a Pathname to a 
Restricted Directory vulne
 CVE-2023-3327
        REJECTED
 CVE-2023-36464 (pypdf is an open source, pure-python PDF library. In affected 
versions ...)
-       TODO: check
+       - pypdf <unfixed>
+       - pypdf2 <unfixed>
+       NOTE: https://github.com/py-pdf/pypdf/pull/969
+       NOTE: https://github.com/py-pdf/pypdf/pull/1828
+       NOTE: 
https://github.com/py-pdf/pypdf/security/advisories/GHSA-4vvm-4w3v-6mr8
 CVE-2023-32623 (Directory traversal vulnerability in Snow Monkey Forms 
versions v5.1.0 ...)
        NOT-FOR-US: Snow Monkey Forms
 CVE-2022-48505 (This issue was addressed with improved data protection. This 
issue is  ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/521295a2e306c5687242828e258a81fcdea27503

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/521295a2e306c5687242828e258a81fcdea27503
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to