[Git][security-tracker-team/security-tracker][master] CVE-2023-36807 does not affect buster or bullseye

[Adrian Bunk (@bunk)]

Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ab1a0c52 by Adrian Bunk at 2023-07-14T21:40:57+03:00
CVE-2023-36807 does not affect buster or bullseye

And bookworm is after the fixed version.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2005,8 +2005,8 @@ CVE-2023-36810 (pypdf is a pure-python PDF library capable of splitting, merging
 	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/c6c56f550bb384e05f0139c796ba1308837d6373 (1.27.9)
 CVE-2023-36807 (pypdf is a pure-python PDF library capable of splitting, merging, crop ...)
 	- pypdf2 2.10.7-1
-	[bookworm] - pypdf2 <no-dsa> (Minor issue)
-	[bullseye] - pypdf2 <no-dsa> (Minor issue)
+	[bullseye] - pypdf2 <not-affected> (only version 2.10.5 is affected)
+	[buster] - pypdf2 <not-affected> (only version 2.10.5 is affected)
 	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-hm9v-vj3r-r55m
 	NOTE: https://github.com/py-pdf/pypdf/issues/1329
 	NOTE: https://github.com/py-pdf/pypdf/pull/1331



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab1a0c523d13cfcf632b61562c4c917c5edb0cb5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab1a0c523d13cfcf632b61562c4c917c5edb0cb5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230714/e95a8cee/attachment-0001.htm>