[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-18120/gifsicle

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0de65c30 by Salvatore Bonaccorso at 2018-02-02T23:05:36+01:00
Add CVE-2017-18120/gifsicle

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -156,7 +156,9 @@ CVE-2018-6523 (In nProtect AVS V4.0 4.0.0.38, the driver file (TKFsAv.SYS) allow
 CVE-2018-6522 (In nProtect AVS V4.0 4.0.0.38, the driver file (TKRgFtXp.SYS) allows ...)
 	NOT-FOR-US: nProtect AVS
 CVE-2017-18120 (A double-free bug in the read_gif function in gifread.c in gifsicle ...)
-	TODO: check
+	- gifsicle 1.91-1 (bug #878739; bug #881120)
+	NOTE: https://github.com/kohler/gifsicle/issues/117
+	NOTE: https://github.com/kohler/gifsicle/commit/118a46090c50829dc543179019e6140e1235f909
 CVE-2018-6521 (The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL ...)
 	- simplesamlphp 1.15.2-1
 	[stretch] - simplesamlphp <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0de65c302c0c4b2599c2fcd6283c6cb3b2512b18

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0de65c302c0c4b2599c2fcd6283c6cb3b2512b18
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180202/7ef4bfc9/attachment.html>