[Git][security-tracker-team/security-tracker][master] pdfresurrect unimportant

Moritz Muehlenhoff jmm at debian.org
Tue Mar 3 20:48:59 GMT 2020



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c71f8854 by Moritz Muehlenhoff at 2020-03-03T21:48:43+01:00
pdfresurrect unimportant

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -965,10 +965,9 @@ CVE-2019-20486 (An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. M
 CVE-2020-9550
 	RESERVED
 CVE-2020-9549 (In PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bou ...)
-	- pdfresurrect <unfixed> (bug #952948)
-	[buster] - pdfresurrect <no-dsa> (Minor issue)
-	[stretch] - pdfresurrect <no-dsa> (Minor issue)
+	- pdfresurrect <unfixed> (unimportant; bug #952948)
 	NOTE: https://github.com/enferex/pdfresurrect/issues/8
+	NOTE: Crash in CLI tool, no security impact
 CVE-2020-9548 (FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interact ...)
 	- jackson-databind <unfixed>
 	NOTE: https://github.com/FasterXML/jackson-databind/issues/2634



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c71f88540bf8ceb8c9f9a2af2fe06ff777d7b388

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c71f88540bf8ceb8c9f9a2af2fe06ff777d7b388
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200303/1167c783/attachment.html>


More information about the debian-security-tracker-commits mailing list