[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2015-9252/qpdf

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f59e24ba by Salvatore Bonaccorso at 2018-02-13T22:38:34+01:00
Add CVE-2015-9252/qpdf

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -98,7 +98,11 @@ CVE-2016-10713 (An issue was discovered in GNU patch before 2.7.6. Out-of-bounds
 	- patch <unfixed>
 	NOTE: https://git.savannah.gnu.org/cgit/patch.git/commit/src/pch.c?id=a0d7fe4589651c64bd16ddaaa634030bb0455866
 CVE-2015-9252 (An issue was discovered in QPDF before 7.0.0. Endless recursion causes ...)
-	TODO: check
+	- qpdf 7.0.0-1
+	[stretch] - qpdf <no-dsa> (Minor issue)
+	[jessie] - qpdf <no-dsa> (Minor issue)
+	NOTE: https://github.com/qpdf/qpdf/commit/701b518d5c56a1449825a3a37a716c58e05e1c3e
+	NOTE: https://github.com/qpdf/qpdf/issues/51
 CVE-2018-6927 (The futex_requeue function in kernel/futex.c in the Linux kernel before ...)
 	- linux <unfixed>
 	NOTE: Fixed by: https://git.kernel.org/linus/fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f59e24baf894fdb7e967322fd9cfad2649190201

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f59e24baf894fdb7e967322fd9cfad2649190201
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180213/ba16a851/attachment.html>