[Secure-testing-commits] r44348 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Mon Sep 5 19:56:34 UTC 2016


Author: carnil
Date: 2016-09-05 19:56:34 +0000 (Mon, 05 Sep 2016)
New Revision: 44348

Modified:
   data/CVE/list
Log:
Update status for CVE-2016-7127/libgd2

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-09-05 19:47:54 UTC (rev 44347)
+++ data/CVE/list	2016-09-05 19:56:34 UTC (rev 44348)
@@ -62,7 +62,7 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2016/09/02/5
 	NOTE: https://github.com/php/php-src/commit/6dbb1ee46b5f4725cc6519abf91e512a2a10dfed?w=1
 CVE-2016-7127 [imagegammacorrect allows arbitrary write access]
-	- libgd2 <unfixed>
+	- libgd2 <not-affected> (gamma correction is only implemented in PHP)
 	- php7.0 7.0.10-1 (unimportant)
 	- php5 <unfixed> (unimportant)
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=72730




More information about the Secure-testing-commits mailing list