[Git][security-tracker-team/security-tracker][master] CVE-2021-27548/texlive-bin unfixed 1011333

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
369b4e83 by Neil Williams at 2022-05-20T10:21:27+01:00
CVE-2021-27548/texlive-bin unfixed 1011333

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -79603,7 +79603,10 @@ CVE-2021-27550 (Polaris Office v9.102.66 is affected by a divide-by-zero error i
 CVE-2021-27549 (** DISPUTED ** Genymotion Desktop through 3.2.0 leaks the host's clipb ...)
 	NOT-FOR-US: Genymotion Desktop
 CVE-2021-27548 (There is a Null Pointer Dereference vulnerability in the XFAScanner::s ...)
-	TODO: check
+	- texlive-bin <unfixed> (bug #1011333)
+	[bullseye] - texlive-bin <not-affected> (Vulnerable code introduced later)
+	NOTE: embeds http://www.xpdfreader.com/download.html
+	NOTE: PoC crashes pdftosrc binary.
 CVE-2021-27547
 	RESERVED
 CVE-2021-27546



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/369b4e8337544582e514ea376c5df6be3c41292a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/369b4e8337544582e514ea376c5df6be3c41292a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220520/5be3fd50/attachment.htm>