[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Mark three gdk-pixbuf issues as fixed via unstable
Salvatore Bonaccorso
carnil at debian.org
Sun Mar 18 07:42:12 UTC 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
f8a2ae7b by Salvatore Bonaccorso at 2018-03-18T08:41:44+01:00
Mark three gdk-pixbuf issues as fixed via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -56686,7 +56686,7 @@ CVE-2017-6317 (Memory leak in the add_shader_program function in vrend_renderer.
- virglrenderer 0.6.0-1 (bug #858255)
NOTE: https://cgit.freedesktop.org/virglrenderer/commit/?id=a2f12a1b0f95b13b6f8dc3d05d7b74b4386394e4 (0.6.0)
CVE-2017-6314 (The make_available_at_least function in io-tiff.c in gdk-pixbuf allows ...)
- - gdk-pixbuf <unfixed> (low; bug #856448)
+ - gdk-pixbuf 2.36.11-2 (low; bug #856448)
[stretch] - gdk-pixbuf 2.36.5-2+deb9u2
[jessie] - gdk-pixbuf <ignored> (Minor issue)
[wheezy] - gdk-pixbuf <no-dsa> (Minor issue, can be fixed in next update)
@@ -56694,7 +56694,7 @@ CVE-2017-6314 (The make_available_at_least function in io-tiff.c in gdk-pixbuf a
NOTE: http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html
NOTE: Fixed by: https://git.gnome.org/browse/gdk-pixbuf/commit/?id=1e513abdb55529f888233d3c96b27352d83aad5f
CVE-2017-6313 (Integer underflow in the load_resources function in io-icns.c in ...)
- - gdk-pixbuf <unfixed> (low; bug #856445)
+ - gdk-pixbuf 2.36.11-2 (low; bug #856445)
[stretch] - gdk-pixbuf 2.36.5-2+deb9u2
[jessie] - gdk-pixbuf <ignored> (Minor issue)
[wheezy] - gdk-pixbuf <no-dsa> (Minor issue, can be fixed in next update)
@@ -56703,7 +56703,7 @@ CVE-2017-6313 (Integer underflow in the load_resources function in io-icns.c in
NOTE: Fixed by: https://git.gnome.org/browse/gdk-pixbuf/commit/?id=210b16399a492d05efb209615a143920b24251f4
NOTE: Tests: https://git.gnome.org/browse/gdk-pixbuf/commit/?id=4cc39d479356b6b09e3d62a0f3ab424db6c266d8
CVE-2017-6312 (Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent ...)
- - gdk-pixbuf <unfixed> (low; bug #856444)
+ - gdk-pixbuf 2.36.11-2 (low; bug #856444)
[stretch] - gdk-pixbuf 2.36.5-2+deb9u2
[jessie] - gdk-pixbuf <ignored> (Minor issue)
[wheezy] - gdk-pixbuf <no-dsa> (Minor issue, can be fixed in next update)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f8a2ae7b460315d5d367f7aa5ae38a4cf5ba549b
---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f8a2ae7b460315d5d367f7aa5ae38a4cf5ba549b
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180318/b53c7320/attachment.html>
More information about the Secure-testing-commits
mailing list