aboutsummaryrefslogtreecommitdiffstats
path: root/ChangeLog
diff options
context:
space:
mode:
authorJay Berkenbilt <ejb@ql.org>2017-07-25 16:21:27 +0200
committerJay Berkenbilt <ejb@ql.org>2017-07-26 12:24:07 +0200
commit315092dd98d5230ef0efa18b294d464d0e9f79d0 (patch)
treec0031a373dd87c04d2d34f2fbcd7602b344c4ac2 /ChangeLog
parent603f222365252f1a1e20303b3dbe52466be3053b (diff)
downloadqpdf-315092dd98d5230ef0efa18b294d464d0e9f79d0.tar.zst
Avoid xref reconstruction infinite loop (fixes #100)
This is CVE-2017-9209.
Diffstat (limited to 'ChangeLog')
-rw-r--r--ChangeLog4
1 files changed, 4 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog
index 32bafad6..ce0ce1e7 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,9 @@
2017-07-26 Jay Berkenbilt <ejb@ql.org>
+ * CVE-2017-9209: Fix infinite loop caused by attempting to
+ reconstruct the xref table while already in the process of
+ reconstructing the xref table.
+
* CVE-2017-9210: Fix infinite loop caused by attempting to unparse
an object for inclusion in the text of an exception.