[Secure-testing-commits] r50529 - data/CVE

[Mattia Rizzolo]

Author: mattia
Date: 2017-04-10 14:30:14 +0000 (Mon, 10 Apr 2017)
New Revision: 50529

Modified:
   data/CVE/list
Log:
link another libpodofo commit fix

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-10 13:00:05 UTC (rev 50528)
+++ data/CVE/list	2017-04-10 14:30:14 UTC (rev 50529)
@@ -5553,7 +5553,7 @@
 	[wheezy] - libpodofo <no-dsa> (Minor issue)
 	NOTE: https://blogs.gentoo.org/ago/2017/02/01/podofo-infinite-loop-in-podofopdfpagegetinheritedkeyfromobject-pdfpage-cpp
 	NOTE: https://sourceforge.net/p/podofo/mailman/podofo-users/thread/12497325.VLNgGImML2%40blackgate/#msg35640936
-	NOTE: upstream commit: https://sourceforge.net/p/podofo/code/1835
+	NOTE: upstream commits: https://sourceforge.net/p/podofo/code/1835 - https://sourceforge.net/p/podofo/code/1838
 CVE-2017-5849 (tiffttopnm in netpbm 10.47.63 does not properly use the libtiff ...)
 	- netpbm-free <not-affected> (vulnerable code not present)
 	NOTE: http://www.openwall.com/lists/oss-security/2017/02/02/2