[Secure-testing-commits] r52274 - data/CVE
Moritz Muehlenhoff
jmm at moszumanska.debian.org
Sun Jun 4 10:19:58 UTC 2017
Author: jmm
Date: 2017-06-04 10:19:58 +0000 (Sun, 04 Jun 2017)
New Revision: 52274
Modified:
data/CVE/list
Log:
apng2gif no-dsa
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-06-04 10:07:18 UTC (rev 52273)
+++ data/CVE/list 2017-06-04 10:19:58 UTC (rev 52274)
@@ -7123,14 +7123,17 @@
RESERVED
CVE-2017-6962 (An issue was discovered in apng2gif 1.7. There is an integer overflow ...)
- apng2gif <unfixed> (bug #854447)
+ [stretch] - apng2gif <no-dsa> (Minor issue; can be fixed via point release)
[jessie] - apng2gif <not-affected> (Vulnerable code introduced later with refactoring)
[wheezy] - apng2gif <not-affected> (Vulnerable code introduced later with refactoring)
CVE-2017-6961 (An issue was discovered in apng2gif 1.7. There is improper sanitization ...)
- apng2gif <unfixed> (bug #854441)
+ [stretch] - apng2gif <no-dsa> (Minor issue; can be fixed via point release)
[jessie] - apng2gif <not-affected> (Vulnerable code introduced later with refactoring)
[wheezy] - apng2gif <not-affected> (Vulnerable code introduced later with refactoring)
CVE-2017-6960 (An issue was discovered in apng2gif 1.7. There ...)
- apng2gif <unfixed> (bug #854367)
+ [stretch] - apng2gif <no-dsa> (Minor issue; can be fixed via point release)
[jessie] - apng2gif <no-dsa> (Minor issue; can be fixed via point release)
NOTE: Reproduced on wheezy, jessie and sid.
CVE-2017-6959
More information about the Secure-testing-commits
mailing list