[Secure-testing-commits] r41810 - in data: CVE DLA
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Tue May 17 17:06:53 UTC 2016
Author: carnil
Date: 2016-05-17 17:06:53 +0000 (Tue, 17 May 2016)
New Revision: 41810
Modified:
data/CVE/list
data/DLA/list
Log:
Add CVE-2015-8875 for DLA-450-1/gdk-pixbuf
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-05-17 17:04:35 UTC (rev 41809)
+++ data/CVE/list 2016-05-17 17:06:53 UTC (rev 41810)
@@ -17407,8 +17407,8 @@
NOTE: https://git.gnome.org/browse/gdk-pixbuf/commit/?id=6ddca835100107e6b5841ce9d56074f6d98c387e
NOTE: gtk+2.0 2.21.5-1 removed the embedded copy of gdk-pixbuf and build-depends on external gdk-pixbuf
CVE-2015-8875 [Integer overlows in pixops_* functions]
+ {DLA-450-1}
- gdk-pixbuf 2.34.0-1
- [wheezy] - gdk-pixbuf 2.26.1-1+deb7u4
NOTE: Fixed by: https://git.gnome.org/browse/gdk-pixbuf/commit/?id=dbfe8f70471864818bf458a39c8a99640895bd22 (2.33.1)
NOTE: http://www.openwall.com/lists/oss-security/2016/05/12/3
CVE-2015-7674 (Integer overflow in the pixops_scale_nearest function in ...)
Modified: data/DLA/list
===================================================================
--- data/DLA/list 2016-05-17 17:04:35 UTC (rev 41809)
+++ data/DLA/list 2016-05-17 17:06:53 UTC (rev 41810)
@@ -83,7 +83,7 @@
{CVE-2016-0636 CVE-2016-0686 CVE-2016-0687 CVE-2016-0695 CVE-2016-3425 CVE-2016-3426 CVE-2016-3427}
[wheezy] - openjdk-7 7u101-2.6.6-2~deb7u1
[30 Apr 2016] DLA-450-1 gdk-pixbuf - security update
- {CVE-2015-7552 CVE-2015-7674}
+ {CVE-2015-7552 CVE-2015-8875 CVE-2015-7674}
[wheezy] - gdk-pixbuf 2.26.1-1+deb7u4
[30 Apr 2016] DLA-449-1 botan1.10 - security update
{CVE-2014-9742 CVE-2015-5726 CVE-2015-5727 CVE-2015-7827 CVE-2016-2194 CVE-2016-2195 CVE-2016-2849}
More information about the Secure-testing-commits
mailing list