[Git][security-tracker-team/security-tracker][master] new poppler issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
94aed0aa by Moritz Muehlenhoff at 2024-12-23T09:37:48+01:00
new poppler issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,7 @@
 CVE-2024-56378 (libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vul ...)
-	TODO: check
+	- poppler <unfixed>
+	NOTE: https://gitlab.freedesktop.org/poppler/poppler/-/issues/1553
+	NOTE: https://gitlab.freedesktop.org/poppler/poppler/-/commit/ade9b5ebed44b0c15522c27669ef6cdf93eff84e
 CVE-2024-56375 (An integer underflow was discovered in Fort 1.6.3 and 1.6.4 before 1.6 ...)
 	- fort-validator 1.6.5-1
 	[bookworm] - fort-validator <not-affected> (Vulnerable code introduced later in 1.6.3)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94aed0aa8d3d51c4a3f061edf1c630c39d72f00e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94aed0aa8d3d51c4a3f061edf1c630c39d72f00e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241223/aac77f0b/attachment.htm>