Adrian Bunk pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
abcc50cf by Adrian Bunk at 2023-10-15T23:24:58+03:00
Mark CVE-2020-18839/poppler in buster fixed by the same version as
CVE-2020-27778
Confirmed with the PoC that 0.71.0-5 segfaults
and 0.71.0-5+deb10u2 does not.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -234882,6 +234882,7 @@ CVE-2020-18840
RESERVED
CVE-2020-18839 (Buffer Overflow vulnerability in HtmlOutputDev::page in
poppler 0.75.0 ...)
- poppler 0.85.0-2
+ [buster] - poppler 0.71.0-5+deb10u1
NOTE: https://gitlab.freedesktop.org/poppler/poppler/-/issues/742
NOTE: Fixed by:
https://gitlab.freedesktop.org/poppler/poppler/-/commit/30c731b487190c02afff3f036736a392eb60cd9a
(poppler-0.76.0)
NOTE: Duplicate issue of CVE-2020-27778 (assigning CNA contacted)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abcc50cf5611995a272b0b2e064f85011b0f89f0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abcc50cf5611995a272b0b2e064f85011b0f89f0
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
