Re: Need more information on recent poppler issues

[Michael Gilbert <michael.s.gilbert () gmail com>]

On Mon, 30 Nov 2009 20:08:56 -0500 (EST) Steven M. Christey wrote:

> DSA-1941 lists three reserved CVE entries for Poppler issues, but there
> aren't any more details, which makes it difficult to create CVE
> descriptions.  Specifically, CVE-2009-3906, CVE-2009-3907, and
> CVE-2009-3908 don't have any details as far as I can tell.
>
> Can anybody help?

those appear to be typos in the DSA.  the correct CVEs are
CVE-2009-3606, CVE-2009-3607, CVE-2009-3608, and CVE-2009-3609, which
follow in the CVE-2009-360* series of recent xpdf flaws.  hope this
helps.

best wishes,
mike