[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Reference fixing commit for CVE-2017-6312/gdk-pixbuf

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1f99c13b by Salvatore Bonaccorso at 2018-01-13T16:08:55+01:00
Reference fixing commit for CVE-2017-6312/gdk-pixbuf

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -47224,6 +47224,8 @@ CVE-2017-6312 (Integer overflow in io-ico.c in gdk-pixbuf allows context-depende
 	[wheezy] - gdk-pixbuf <no-dsa> (Minor issue, can be fixed in next update)
 	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=779012
 	NOTE: http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html
+	NOTE: Fixed by: https://git.gnome.org/browse/gdk-pixbuf/commit/?id=dec9ca22d70c0f0d4492333b4e8147afb038afd2
+	NOTE: Tests: https://git.gnome.org/browse/gdk-pixbuf/commit/?id=a6303ad765882555cf1b278a09be5f9e4cf3a39d
 CVE-2017-6311 (gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent ...)
 	- gdk-pixbuf <unfixed> (bug #858491; unimportant)
 	[jessie] - gdk-pixbuf <not-affected> (Code introduced in 2.36.1)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1f99c13bfb1fbc80ddf1ff0c659ee8cf09f69dca

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1f99c13bfb1fbc80ddf1ff0c659ee8cf09f69dca
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180113/76686ef6/attachment-0001.html>