[Secure-testing-commits] r39699 - data

Guido Guenther agx at moszumanska.debian.org
Mon Feb 15 20:52:21 UTC 2016


Author: agx
Date: 2016-02-15 20:52:21 +0000 (Mon, 15 Feb 2016)
New Revision: 39699

Modified:
   data/dla-needed.txt
Log:
gtk+2.0 in squeeze-lts affected by CVE-2013-7447

gnome-photos also contains the overflow in
    view_helper_draw in src/gegl-gtk-view-helper.c
but I've not been able to crash it since it doesn't load images
directly.

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2016-02-15 19:49:41 UTC (rev 39698)
+++ data/dla-needed.txt	2016-02-15 20:52:21 UTC (rev 39699)
@@ -24,6 +24,8 @@
 --
 eglibc (Aurelien Jarno)
 --
+gtk+2.0
+--
 icu
   NOTE: check comments on CVE-2016-0494 as well
   NOTE: tentative package for icu https://lists.debian.org/debian-lts/2016/01/msg00133.html




More information about the Secure-testing-commits mailing list