[Git][security-tracker-team/security-tracker][master] poppler no-dsa on jessie

[Emilio Pozuelo Monfort]

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4c1804fe by Emilio Pozuelo Monfort at 2019-01-15T12:39:54Z
poppler no-dsa on jessie

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -5707,6 +5707,7 @@ CVE-2018-20663 (The Reporting Addon (aka Reports Addon) through 2019-01-02 for C
 	NOT-FOR-US: Reporting Addon for CUBA Platform
 CVE-2018-20662 (In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause ...)
 	- poppler <unfixed> (bug #918158)
+	[jessie] - poppler <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/poppler/poppler/issues/706
 	NOTE: Initial approach of fixing the issue via
 	NOTE: https://gitlab.freedesktop.org/poppler/poppler/commit/9fd5ec0e6e5f763b190f2a55ceb5427cfe851d5f
@@ -5932,6 +5933,7 @@ CVE-2018-20651 (A NULL pointer dereference was discovered in ...)
 	NOTE: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=54025d5812ff100f5f0654eb7e1ffd50f2e37f5f
 CVE-2018-20650 (A reachable Object::dictLookup assertion in Poppler 0.72.0 allows ...)
 	- poppler <unfixed> (bug #917974)
+	[jessie] - poppler <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/poppler/poppler/commit/de0c0b8324e776f0b851485e0fc9622fc35695b7
 	NOTE: https://gitlab.freedesktop.org/poppler/poppler/issues/704
 CVE-2018-20649


=====================================
data/dla-needed.txt
=====================================
@@ -93,8 +93,6 @@ policykit-1 (Emilio)
   NOTE: 20181207: jessie vulnerable to CVE-2018-19788? unable to reproduce systemctl poc (Santiago)
   NOTE: 20181230: needs source code analysis
 --
-poppler (Emilio)
---
 python3.4 (Brian May)
   NOTE: 20181225: The update should include also the postponed and no-dsa
   NOTE: issues which were already fixed by us in Wheezy. (apo)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4c1804fe2cd141c5c879c4738986a8596a707070

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4c1804fe2cd141c5c879c4738986a8596a707070
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190115/84c3e679/attachment.html>