[Secure-testing-commits] r54770 - data/CVE

Tue Aug 15 16:55:57 UTC 2017

Author: pochu
Date: 2017-08-15 16:55:56 +0000 (Tue, 15 Aug 2017)
New Revision: 54770

Modified:
   data/CVE/list
Log:
poppler: add links to upstream fixes

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-08-15 16:49:57 UTC (rev 54769)
+++ data/CVE/list	2017-08-15 16:55:56 UTC (rev 54770)
@@ -6263,6 +6263,7 @@
 	- poppler 0.57.0-1 (bug #867477)
 	NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=100774
 	NOTE: http://somevulnsofadlab.blogspot.com/2017/06/popplerstack-buffer-overflow-in.html
+	NOTE: Fixed by: https://cgit.freedesktop.org/poppler/poppler/commit/?id=75fff6556eaf0ef3a6fcdef2c2229d0b6d1c58d9
 CVE-2017-9864 (An issue was discovered in SMA Solar Technology products. An attacker ...)
 	NOT-FOR-US: SMA Solar Technology products
 CVE-2017-9863 (An issue was discovered in SMA Solar Technology products. If a user ...)
@@ -14912,6 +14913,7 @@
 CVE-2017-7515 (poppler through version 0.55.0 is vulnerable to an uncontrolled ...)
 	- poppler 0.57.0-1 (unimportant)
 	NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=101208
+	NOTE: https://cgit.freedesktop.org/poppler/poppler/commit/?id=771c82623e8e1e0c92b8ca6f7c2b8a81ccbb60d3
 	NOTE: Crash in CLI tool, no security implications
 CVE-2017-7514
 	RESERVED


