[Secure-testing-commits] r48509 - data/CVE

Sun Jan 29 00:19:43 UTC 2017

Author: rbalint
Date: 2017-01-29 00:19:43 +0000 (Sun, 29 Jan 2017)
New Revision: 48509

Modified:
   data/CVE/list
Log:
libgd2's CVE-2016-10166 doesn't affect wheezy

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-01-28 23:51:43 UTC (rev 48508)
+++ data/CVE/list	2017-01-29 00:19:43 UTC (rev 48509)
@@ -54,6 +54,7 @@
 	RESERVED
 CVE-2016-10166 [Fix potential unsigned underflow]
 	- libgd2 2.2.4-1
+	[wheezy] - libgd2 <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/libgd/libgd/commit/60bfb401ad5a4a8ae995dcd36372fe15c71e1a35
 	NOTE: http://www.openwall.com/lists/oss-security/2017/01/26/1
 CVE-2016-10167 [Fix DOS vulnerability in gdImageCreateFromGd2Ctx()]


