[Secure-testing-commits] r24319 - data/CVE

Raphael Geissert atomo64-guest at alioth.debian.org
Thu Nov 7 10:31:21 UTC 2013


Author: atomo64-guest
Date: 2013-11-07 10:31:20 +0000 (Thu, 07 Nov 2013)
New Revision: 24319

Modified:
   data/CVE/list
Log:
one unimporant poppler issue, two no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-11-07 07:23:24 UTC (rev 24318)
+++ data/CVE/list	2013-11-07 10:31:20 UTC (rev 24319)
@@ -4850,16 +4850,20 @@
 CVE-2013-4474 [User controlled format string]
 	RESERVED
 	- poppler <unfixed>
+	[squeeze] - poppler <no-dsa> (cli tool)
+	[wheezy] - poppler <no-dsa> (cli tool)
 	NOTE: check
 CVE-2013-4473 [Stack based buffer overflow]
 	RESERVED
 	- poppler <unfixed>
+	[squeeze] - poppler <no-dsa> (cli tool)
+	[wheezy] - poppler <no-dsa> (cli tool)
 	NOTE: check
 CVE-2013-4472 [Race condition on temporary file]
 	RESERVED
-	- poppler <unfixed>
-	- xpdf <unfixed>
-	NOTE: check
+	- poppler <unfixed> (unimportant)
+	- xpdf <unfixed> (unimportant)
+	NOTE: specific to non-*NIX systems
 CVE-2013-4471 [password reset vulnerability]
 	RESERVED
 	- horizon 2013.2-1




More information about the Secure-testing-commits mailing list