[Git][security-tracker-team/security-tracker][master] Three mupdf issues fixed in unstable

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
48b1da0f by Salvatore Bonaccorso at 2018-04-30T07:01:22+02:00
Three mupdf issues fixed in unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -11490,7 +11490,7 @@ CVE-2018-6194 (A cross-site scripting (XSS) vulnerability in ...)
 CVE-2018-6193 (A Cross-Site Scripting (XSS) vulnerability was found in Routers2 2.24, ...)
 	NOT-FOR-US: Routers2
 CVE-2018-6192 (In Artifex MuPDF 1.12.0, the pdf_read_new_xref function in ...)
-	- mupdf <unfixed> (bug #888487)
+	- mupdf 1.13.0+ds1-1 (bug #888487)
 	[stretch] - mupdf <no-dsa> (Minor issue)
 	[jessie] - mupdf <no-dsa> (Minor issue)
 	[wheezy] - mupdf <no-dsa> (Minor issue)
@@ -11536,7 +11536,7 @@ CVE-2018-6188 (django.contrib.auth.forms.AuthenticationForm in Django 2.0 before
 	[wheezy] - python-django <not-affected> (Issue introduced in 1.11.8 and 2.0)
 	NOTE: https://www.djangoproject.com/weblog/2018/feb/01/security-releases/
 CVE-2018-6187 (In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow ...)
-	- mupdf <unfixed> (bug #888464)
+	- mupdf 1.13.0+ds1-1 (bug #888464)
 	[stretch] - mupdf <no-dsa> (Minor issue)
 	[jessie] - mupdf <no-dsa> (Minor issue)
 	[wheezy] - mupdf <ignored> (Most likely not affected, minor issue)
@@ -13218,7 +13218,7 @@ CVE-2018-5688 (ILIAS before 5.2.4 has XSS via the cmd parameter to the displayHe
 CVE-2018-5687 (NewsBee allows XSS via the Company Name field in the Settings under ...)
 	NOT-FOR-US: NewsBee CMS
 CVE-2018-5686 (In MuPDF 1.12.0, there is an infinite loop vulnerability and ...)
-	- mupdf <unfixed> (bug #887130)
+	- mupdf 1.13.0+ds1-1 (bug #887130)
 	[stretch] - mupdf <no-dsa> (Minor issue)
 	[jessie] - mupdf <no-dsa> (Minor issue)
 	[wheezy] - mupdf <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/48b1da0fa089d1402c9cc3056693ee2f4084124a

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/48b1da0fa089d1402c9cc3056693ee2f4084124a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180430/1b789ded/attachment.html>