[Secure-testing-commits] r55200 - in data: . DLA

Emilio Pozuelo Monfort pochu at moszumanska.debian.org
Tue Aug 29 16:49:22 UTC 2017


Author: pochu
Date: 2017-08-29 16:49:22 +0000 (Tue, 29 Aug 2017)
New Revision: 55200

Modified:
   data/DLA/list
   data/dla-needed.txt
Log:
Reserve DLA-1074-1 for poppler

Modified: data/DLA/list
===================================================================
--- data/DLA/list	2017-08-29 16:48:58 UTC (rev 55199)
+++ data/DLA/list	2017-08-29 16:49:22 UTC (rev 55200)
@@ -1,3 +1,6 @@
+[29 Aug 2017] DLA-1074-1 poppler - security update
+	{CVE-2013-4473 CVE-2013-4474 CVE-2017-9775 CVE-2017-9776 CVE-2017-9865}
+	[wheezy] - poppler 0.18.4-6+deb7u2
 [29 Aug 2017] DLA-1073-1 openjdk-7 - security update
 	{CVE-2017-10053 CVE-2017-10067 CVE-2017-10074 CVE-2017-10081 CVE-2017-10087 CVE-2017-10089 CVE-2017-10090 CVE-2017-10096 CVE-2017-10101 CVE-2017-10102 CVE-2017-10107 CVE-2017-10108 CVE-2017-10109 CVE-2017-10110 CVE-2017-10115 CVE-2017-10116 CVE-2017-10118 CVE-2017-10135 CVE-2017-10176 CVE-2017-10193 CVE-2017-10198 CVE-2017-10243}
 	[wheezy] - openjdk-7 7u151-2.6.11-1+deb7u1

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2017-08-29 16:48:58 UTC (rev 55199)
+++ data/dla-needed.txt	2017-08-29 16:49:22 UTC (rev 55200)
@@ -135,11 +135,6 @@
   NOTE: CVE already fixed in git are:
   NOTE: - none so far
 --
-poppler (Emilio Pozuelo)
-  NOTE: patch available for CVE-2017-9865 but not fixed upstream
-  NOTE: yet. two more issues fixed upstream, but not in a release nor
-  NOTE: unstable.
---
 rbenv
   NOTE: .ruby-version is .rbenv-version in wheezy
   NOTE: 20170802: No upstream patch (lamby)




More information about the Secure-testing-commits mailing list