[Git][security-tracker-team/security-tracker][master] Three CVEs for apng2gif fixed via unstable upload

Salvatore Bonaccorso carnil at debian.org
Mon Oct 29 20:09:42 GMT 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f575dccf by Salvatore Bonaccorso at 2018-10-29T20:08:56Z
Three CVEs for apng2gif fixed via unstable upload

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -82817,18 +82817,18 @@ CVE-2017-6964 (dmcrypt-get-device, as shipped in the eject package of Debian and
 CVE-2017-6963
 	RESERVED
 CVE-2017-6962 (An issue was discovered in apng2gif 1.7. There is an integer overflow ...)
-	- apng2gif <unfixed> (bug #854447)
+	- apng2gif 1.8-0.1 (bug #854447)
 	[stretch] - apng2gif <no-dsa> (Minor issue; can be fixed via point release)
 	[jessie] - apng2gif <not-affected> (Vulnerable code introduced later with refactoring)
 	[wheezy] - apng2gif <not-affected> (Vulnerable code introduced later with refactoring)
 CVE-2017-6961 (An issue was discovered in apng2gif 1.7. There is improper sanitization ...)
-	- apng2gif <unfixed> (bug #854441)
+	- apng2gif 1.8-0.1 (bug #854441)
 	[stretch] - apng2gif <no-dsa> (Minor issue; can be fixed via point release)
 	[jessie] - apng2gif <not-affected> (Vulnerable code introduced later with refactoring)
 	[wheezy] - apng2gif <not-affected> (Vulnerable code introduced later with refactoring)
 CVE-2017-6960 (An issue was discovered in apng2gif 1.7. There ...)
 	{DLA-981-1}
-	- apng2gif <unfixed> (bug #854367)
+	- apng2gif 1.8-0.1 (bug #854367)
 	[stretch] - apng2gif <no-dsa> (Minor issue; can be fixed via point release)
 	[jessie] - apng2gif <no-dsa> (Minor issue; can be fixed via point release)
 CVE-2017-6959



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f575dccf406bedd80c578601d36818ac5ae061d9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f575dccf406bedd80c578601d36818ac5ae061d9
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181029/a15358b2/attachment.html>


More information about the debian-security-tracker-commits mailing list