[Git][security-tracker-team/security-tracker][master] Two libgd2 issues (CVE-2019-697{7,8}) fixed in unstable

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5ab2063a by Salvatore Bonaccorso at 2019-02-06T20:52:22Z
Two libgd2 issues (CVE-2019-697{7,8}) fixed in unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1403,7 +1403,7 @@ CVE-2018-20744 (The Olivier Poitrey Go CORS handler through 1.3.0 actively conve
 	NOT-FOR-US: Olivier Poitrey Go CORS handler
 CVE-2019-6978 (The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the ...)
 	{DSA-4384-1 DLA-1651-1}
-	- libgd2 <unfixed> (bug #920728)
+	- libgd2 2.2.5-5.1 (bug #920728)
 	NOTE: https://github.com/libgd/libgd/issues/492
 	NOTE: https://github.com/libgd/libgd/commit/553702980ae89c83f2d6e254d62cf82e204956d0
 CVE-2019-XXXX [DoS due to changing # of allowed users in root channel]
@@ -1415,7 +1415,7 @@ CVE-2019-XXXX [DoS due to changing # of allowed users in root channel]
 	NOTE: Fixed by: https://github.com/mumble-voip/mumble/commit/3edc46ff7308691d342f8c08ce1afaaefce35a5c
 CVE-2019-6977 (gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka ...)
 	{DSA-4384-1 DLA-1651-1}
-	- libgd2 <unfixed> (bug #920645)
+	- libgd2 2.2.5-5.1 (bug #920645)
 	- php7.3 7.3.1-1 (unimportant)
 	- php7.0 <removed> (unimportant)
 	- php5 <removed> (unimportant)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5ab2063a8c495e35ed26a7ed897b1ce650a16db5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5ab2063a8c495e35ed26a7ed897b1ce650a16db5
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190206/4f9a8493/attachment-0001.html>