[Git][security-tracker-team/security-tracker][master] Record upstream fix for CVE-2018-5686

Salvatore Bonaccorso carnil at debian.org
Mon Apr 30 06:01:13 BST 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
286979f6 by Salvatore Bonaccorso at 2018-04-30T07:00:53+02:00
Record upstream fix for CVE-2018-5686

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -13225,6 +13225,7 @@ CVE-2018-5686 (In MuPDF 1.12.0, there is an infinite loop vulnerability and ...)
 	NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=698860
 	NOTE: pdf_parse_array function in source/pdf/pdf-parse.c does not consider
 	NOTE: EOF.
+	NOTE: Fixed by: http://git.ghostscript.com/?p=mupdf.git;h=b70eb93f6936c03d8af52040bbca4d4a7db39079
 CVE-2018-5685 (In GraphicsMagick 1.3.27, there is an infinite loop and application ...)
 	{DLA-1245-1}
 	- graphicsmagick 1.3.27-4 (bug #887158)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/286979f61569c5cc824eb517759a99d0b845f2c0

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/286979f61569c5cc824eb517759a99d0b845f2c0
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180430/eaf31e94/attachment.html>


More information about the debian-security-tracker-commits mailing list