[Secure-testing-commits] r48414 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Jan 26 12:26:44 UTC 2017


Author: carnil
Date: 2017-01-26 12:26:44 +0000 (Thu, 26 Jan 2017)
New Revision: 48414

Modified:
   data/CVE/list
Log:
Add three more items for libgd2 without CVE

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-26 12:21:04 UTC (rev 48413)
+++ data/CVE/list	2017-01-26 12:26:44 UTC (rev 48414)
@@ -1,3 +1,12 @@
+CVE-2017-XXXX [Fix potential unsigned underflow]
+	- libgd2 <unfixed>
+	NOTE: https://github.com/libgd/libgd/commit/60bfb401ad5a4a8ae995dcd36372fe15c71e1a35
+CVE-2017-XXXX [Fix DOS vulnerability in gdImageCreateFromGd2Ctx()]
+	- libgd2 <unfixed>
+	NOTE: https://github.com/libgd/libgd/commit/fe9ed49dafa993e3af96b6a5a589efeea9bfb36f
+CVE-2017-XXXX [Fix #354: Signed Integer Overflow gd_io.c]
+	- libgd2 <unfixed>
+	NOTE: https://github.com/libgd/libgd/commit/69d2fd2c597ffc0c217de1238b9bf4d4bceba8e6
 CVE-2017-5588
 	RESERVED
 CVE-2017-5587




More information about the Secure-testing-commits mailing list