Mattia Rizzolo pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b64c8873 by Mattia Rizzolo at 2018-01-26T18:01:31+01:00
link upstream commit for CVE-2017-6845/libpodofo
Signed-off-by: Mattia Rizzolo <mat...@debian.org>
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -48770,6 +48770,7 @@ CVE-2017-6845 (The PoDoFo::PdfColor::operator function
in PdfColor.cpp in PoDoFo
NOTE: and the worst case is a DoS.
NOTE: http://www.openwall.com/lists/oss-security/2017/03/02/6
NOTE:
https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-podofopdfcoloroperator-pdfcolor-cpp
+ NOTE: upstream commit: https://sourceforge.net/p/podofo/code/1873/
CVE-2017-6844 (Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection
function ...)
{DLA-929-1}
- libpodofo 0.9.4-5 (bug #861561)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/b64c887361e5ee44a3eb8baa75c0e6da87f78639
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/b64c887361e5ee44a3eb8baa75c0e6da87f78639
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
