[Secure-testing-commits] r55962 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-09-21 09:24:20 +0000 (Thu, 21 Sep 2017)
New Revision: 55962

Modified:
   data/CVE/list
Log:
One new poppler issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-21 09:19:19 UTC (rev 55961)
+++ data/CVE/list	2017-09-21 09:24:20 UTC (rev 55962)
@@ -42,7 +42,9 @@
 CVE-2017-14618 (Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ ...)
 	TODO: check
 CVE-2017-14617 (In Poppler 0.59.0, a floating point exception occurs in the ImageStream ...)
-	TODO: check
+	- poppler <unfixed>
+	NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=102854
+	NOTE: https://cgit.freedesktop.org/poppler/poppler/commit/?id=939465c40902d72e0c05d4f3a27ee67e4a007ed7
 CVE-2015-9232 (The Good for Enterprise application 3.0.0.415 for Android does not use ...)
 	TODO: check
 CVE-2017-14616 (An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. If ...)