Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4c1804fe by Emilio Pozuelo Monfort at 2019-01-15T12:39:54Z
poppler no-dsa on jessie
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -5707,6 +5707,7 @@ CVE-2018-20663 (The Reporting Addon (aka Reports Addon)
through 2019-01-02 for C
NOT-FOR-US: Reporting Addon for CUBA Platform
CVE-2018-20662 (In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers
to cause ...)
- poppler <unfixed> (bug #918158)
+ [jessie] - poppler <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/poppler/poppler/issues/706
NOTE: Initial approach of fixing the issue via
NOTE:
https://gitlab.freedesktop.org/poppler/poppler/commit/9fd5ec0e6e5f763b190f2a55ceb5427cfe851d5f
@@ -5932,6 +5933,7 @@ CVE-2018-20651 (A NULL pointer dereference was discovered
in ...)
NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=54025d5812ff100f5f0654eb7e1ffd50f2e37f5f
CVE-2018-20650 (A reachable Object::dictLookup assertion in Poppler 0.72.0
allows ...)
- poppler <unfixed> (bug #917974)
+ [jessie] - poppler <postponed> (Minor issue)
NOTE:
https://gitlab.freedesktop.org/poppler/poppler/commit/de0c0b8324e776f0b851485e0fc9622fc35695b7
NOTE: https://gitlab.freedesktop.org/poppler/poppler/issues/704
CVE-2018-20649
=====================================
data/dla-needed.txt
=====================================
@@ -93,8 +93,6 @@ policykit-1 (Emilio)
NOTE: 20181207: jessie vulnerable to CVE-2018-19788? unable to reproduce
systemctl poc (Santiago)
NOTE: 20181230: needs source code analysis
--
-poppler (Emilio)
---
python3.4 (Brian May)
NOTE: 20181225: The update should include also the postponed and no-dsa
NOTE: issues which were already fixed by us in Wheezy. (apo)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/4c1804fe2cd141c5c879c4738986a8596a707070
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/4c1804fe2cd141c5c879c4738986a8596a707070
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
