[Secure-testing-commits] r57785 - in data: . DLA

[Markus Koschany]

Author: apo
Date: 2017-11-18 17:14:24 +0000 (Sat, 18 Nov 2017)
New Revision: 57785

Modified:
   data/DLA/list
   data/dla-needed.txt
Log:
Reserve DLA-1177-1 for poppler

Modified: data/DLA/list
===================================================================
--- data/DLA/list	2017-11-18 16:40:38 UTC (rev 57784)
+++ data/DLA/list	2017-11-18 17:14:24 UTC (rev 57785)
@@ -1,3 +1,6 @@
+[18 Nov 2017] DLA-1177-1 poppler - security update
+	{CVE-2017-14975 CVE-2017-14976 CVE-2017-14977 CVE-2017-15565}
+	[wheezy] - poppler 0.18.4-6+deb7u4
 [18 Nov 2017] DLA-1176-1 ming - security update
 	{CVE-2017-9988 CVE-2017-9989 CVE-2017-11733}
 	[wheezy] - ming 1:0.4.4-1.1+deb7u5

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2017-11-18 16:40:38 UTC (rev 57784)
+++ data/dla-needed.txt	2017-11-18 17:14:24 UTC (rev 57785)
@@ -82,11 +82,6 @@
 --
 optipng
 --
-poppler (Markus Koschany)
-  NOTE: not fixed in sid yet so did not ping maintainer
-  NOTE: drawForm is doForm1 in wheezy
-  NOTE: exploit does not loop but code looks affected
---
 python-werkzeug (Thorsten Alteholz)
 --
 python2.6 (Roberto C. Sánchez)