[Git][security-tracker-team/security-tracker][master] 2 commits: Add upstream commit for CVE-2017-9774/php-horde-image.

[Chris Lamb]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2c7c0644 by Chris Lamb at 2018-06-22T10:57:13+01:00
Add upstream commit for CVE-2017-9774/php-horde-image.

- - - - -
cb07daaa by Chris Lamb at 2018-06-22T11:14:20+01:00
Upstream patch for CVE-2017-9774/php-horde-image has a regression. See https://github.com/horde/Image/pull/1

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -56686,6 +56686,8 @@ CVE-2017-9775 (Stack buffer overflow in GfxState.cc in pdftocairo in Poppler bef
 CVE-2017-9774 (Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a ...)
 	- php-horde-image 2.5.1-1 (bug #865505)
 	NOTE: https://lists.horde.org/archives/announce/2017/001234.html
+	NOTE: https://github.com/horde/horde/commit/01a11ccd37149101d67e0b20261fa48ab07dae13
+	NOTE: Regression in upstream patch, fixing in https://github.com/horde/Image/pull/1
 CVE-2017-9773 (Denial of Service was found in Horde_Image 2.x before 2.5.0 via a ...)
 	- php-horde-image 2.5.1-1 (bug #865504)
 	[jessie] - php-horde-image <not-affected> (Only Horde_Image above 2.3.0 affected)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/a578d79ef200a631f043cffc34c79b8485e47c9f...cb07daaa529edab0f534542abf0aff6b9a5de3ec

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/a578d79ef200a631f043cffc34c79b8485e47c9f...cb07daaa529edab0f534542abf0aff6b9a5de3ec
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180622/90a941b5/attachment.html>