Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker
Commits: abcc50cf by Adrian Bunk at 2023-10-15T23:24:58+03:00 Mark CVE-2020-18839/poppler in buster fixed by the same version as CVE-2020-27778 Confirmed with the PoC that 0.71.0-5 segfaults and 0.71.0-5+deb10u2 does not. - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -234882,6 +234882,7 @@ CVE-2020-18840 RESERVED CVE-2020-18839 (Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 ...) - poppler 0.85.0-2 + [buster] - poppler 0.71.0-5+deb10u1 NOTE: https://gitlab.freedesktop.org/poppler/poppler/-/issues/742 NOTE: Fixed by: https://gitlab.freedesktop.org/poppler/poppler/-/commit/30c731b487190c02afff3f036736a392eb60cd9a (poppler-0.76.0) NOTE: Duplicate issue of CVE-2020-27778 (assigning CNA contacted) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abcc50cf5611995a272b0b2e064f85011b0f89f0 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abcc50cf5611995a272b0b2e064f85011b0f89f0 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits