[Git][security-tracker-team/security-tracker][master] xpdf n/a

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
47162e3e by Moritz Muehlenhoff at 2023-07-07T15:36:21+02:00
xpdf n/a

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -927,7 +927,7 @@ CVE-2023-33570 (Bagisto v1.5.1 is vulnerable to Server-Side Template Injection (
 CVE-2023-2625 (A vulnerability exists that can be exploited by an authenticated clien ...)
 	NOT-FOR-US: ABB CoreTec
 CVE-2023-3436 (Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is ...)
-	TODO: check
+	- xpdf <not-affected> (Debian uses poppler, which is not affected)
 CVE-2023-3428 [heap-buffer-overflow in coders/tiff.c]
 	- imagemagick <unfixed>
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/a531d28e31309676ce8168c3b6dbbb5374b78790



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/47162e3e0367a78f646145eba0351dc9de7f3f5c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/47162e3e0367a78f646145eba0351dc9de7f3f5c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230707/b794f951/attachment.htm>