[Git][security-tracker-team/security-tracker][master] Mark CVE-2020-18839/poppler in buster fixed by the same version as CVE-2020-27778

[Adrian Bunk (@bunk)]

Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker


Commits:
abcc50cf by Adrian Bunk at 2023-10-15T23:24:58+03:00
Mark CVE-2020-18839/poppler in buster fixed by the same version as CVE-2020-27778

Confirmed with the PoC that 0.71.0-5 segfaults
and 0.71.0-5+deb10u2 does not.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -234882,6 +234882,7 @@ CVE-2020-18840
 	RESERVED
 CVE-2020-18839 (Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 ...)
 	- poppler 0.85.0-2
+	[buster] - poppler 0.71.0-5+deb10u1
 	NOTE: https://gitlab.freedesktop.org/poppler/poppler/-/issues/742
 	NOTE: Fixed by: https://gitlab.freedesktop.org/poppler/poppler/-/commit/30c731b487190c02afff3f036736a392eb60cd9a (poppler-0.76.0)
 	NOTE: Duplicate issue of CVE-2020-27778 (assigning CNA contacted)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abcc50cf5611995a272b0b2e064f85011b0f89f0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abcc50cf5611995a272b0b2e064f85011b0f89f0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231015/a5df2101/attachment.htm>