[Secure-testing-team] [Secure-testing-commits] r6759 - data/CVE

[Florian Weimer]

>  CVE-2007-5049
>  	REJECTED
> -	{DTSA-62-1}
> -	- poppler 0.5.4-6.2 (medium; bug #443903)
> -	- gpdf <removed>
> -	- xpdf 3.02-1.2 (medium; bug #443906)
> -	- kdegraphics 4:3.5.7-4 (medium; bug #444015)
> -	- koffice 1:1.6.3-3 (medium; bug #444014)
> -	- pdftohtml <removed>
> -	- tetex-bin 3.0-12
> -	NOTE: pdftex links to poppler since 3.0-12, thus marking as fixed
> -	- cupsys <not-affected> (unimportant; bug #436099)
> -	NOTE: cups uses xpdf-utils
> -	- pdfkit.framework 0.8-4
> -	NOTE: links to poppler since 0.8-4, thus marking as fixed
> -	- libextractor 0.5.12-1
> -	NOTE: libextractor uses internal pdf decoder since 0.5.12-1, thus marking as fixed

Why does this entry feature different version information than
CVE-2007-3387, when it's allegedly a duplicate?