[Secure-testing-commits] r54395 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-08-07 15:49:07 +0000 (Mon, 07 Aug 2017)
New Revision: 54395

Modified:
   data/CVE/list
Log:
Add bug report for qpdf issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-07 13:25:21 UTC (rev 54394)
+++ data/CVE/list	2017-08-07 15:49:07 UTC (rev 54395)
@@ -2275,25 +2275,25 @@
 	NOTE: Fixed in 7.1.7, 7.0.21, 5.6.31
 	NOTE: Fixed by https://git.php.net/?p=php-src.git;a=commit;h=05255749139b3686c8a6a58ee01131ac0047465e
 CVE-2017-11627 (A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, ...)
-	- qpdf <unfixed> (low)
+	- qpdf <unfixed> (low; bug #871320)
 	[stretch] - qpdf <no-dsa> (Minor issue)
 	[jessie] - qpdf <no-dsa> (Minor issue)
 	[wheezy] - qpdf <no-dsa> (Minor issue)
 	NOTE: https://github.com/qpdf/qpdf/issues/118
 CVE-2017-11626 (A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, ...)
-	- qpdf <unfixed> (low)
+	- qpdf <unfixed> (low; bug #871320)
 	[stretch] - qpdf <no-dsa> (Minor issue)
 	[jessie] - qpdf <no-dsa> (Minor issue)
 	[wheezy] - qpdf <no-dsa> (Minor issue)
 	NOTE: https://github.com/qpdf/qpdf/issues/119
 CVE-2017-11625 (A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, ...)
-	- qpdf <unfixed> (low)
+	- qpdf <unfixed> (low; bug #871320)
 	[stretch] - qpdf <no-dsa> (Minor issue)
 	[jessie] - qpdf <no-dsa> (Minor issue)
 	[wheezy] - qpdf <no-dsa> (Minor issue)
 	NOTE: https://github.com/qpdf/qpdf/issues/120
 CVE-2017-11624 (A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, ...)
-	- qpdf <unfixed> (low)
+	- qpdf <unfixed> (low; bug #871320)
 	[stretch] - qpdf <no-dsa> (Minor issue)
 	[jessie] - qpdf <no-dsa> (Minor issue)
 	[wheezy] - qpdf <no-dsa> (Minor issue)