[Secure-testing-commits] r41810 - in data: CVE DLA

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue May 17 17:06:53 UTC 2016


Author: carnil
Date: 2016-05-17 17:06:53 +0000 (Tue, 17 May 2016)
New Revision: 41810

Modified:
   data/CVE/list
   data/DLA/list
Log:
Add CVE-2015-8875 for DLA-450-1/gdk-pixbuf

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-17 17:04:35 UTC (rev 41809)
+++ data/CVE/list	2016-05-17 17:06:53 UTC (rev 41810)
@@ -17407,8 +17407,8 @@
 	NOTE: https://git.gnome.org/browse/gdk-pixbuf/commit/?id=6ddca835100107e6b5841ce9d56074f6d98c387e
 	NOTE: gtk+2.0 2.21.5-1 removed the embedded copy of gdk-pixbuf and build-depends on external gdk-pixbuf
 CVE-2015-8875 [Integer overlows in pixops_* functions]
+	{DLA-450-1}
 	- gdk-pixbuf 2.34.0-1
-	[wheezy] - gdk-pixbuf 2.26.1-1+deb7u4
 	NOTE: Fixed by: https://git.gnome.org/browse/gdk-pixbuf/commit/?id=dbfe8f70471864818bf458a39c8a99640895bd22 (2.33.1)
 	NOTE: http://www.openwall.com/lists/oss-security/2016/05/12/3
 CVE-2015-7674 (Integer overflow in the pixops_scale_nearest function in ...)

Modified: data/DLA/list
===================================================================
--- data/DLA/list	2016-05-17 17:04:35 UTC (rev 41809)
+++ data/DLA/list	2016-05-17 17:06:53 UTC (rev 41810)
@@ -83,7 +83,7 @@
 	{CVE-2016-0636 CVE-2016-0686 CVE-2016-0687 CVE-2016-0695 CVE-2016-3425 CVE-2016-3426 CVE-2016-3427}
 	[wheezy] - openjdk-7 7u101-2.6.6-2~deb7u1
 [30 Apr 2016] DLA-450-1 gdk-pixbuf - security update
-	{CVE-2015-7552 CVE-2015-7674}
+	{CVE-2015-7552 CVE-2015-8875 CVE-2015-7674}
 	[wheezy] - gdk-pixbuf 2.26.1-1+deb7u4
 [30 Apr 2016] DLA-449-1 botan1.10 - security update
 	{CVE-2014-9742 CVE-2015-5726 CVE-2015-5727 CVE-2015-7827 CVE-2016-2194 CVE-2016-2195 CVE-2016-2849}




More information about the Secure-testing-commits mailing list