[Git][security-tracker-team/security-tracker][master] Add CVE-2019-6799/libgd2

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8ad5429c by Salvatore Bonaccorso at 2019-01-27T08:24:46Z
Add CVE-2019-6799/libgd2

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,10 @@
 CVE-2019-6977 (gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka ...)
-	TODO: check
+	- libgd2 <unfixed>
+	- php7.3 7.3.1-1 (unimportant)
+	- php7.0 <removed> (unimportant)
+	- php5 <removed> (unimportant)
+	NOTE: Fixed in 5.6.40, 7.1.26, 7.2.14, 7.3.1
+	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=77270
 CVE-2019-6976 (libvips before 8.7.4 writes to uninitialized memory locations in ...)
 	- vips 8.7.4-1
 	NOTE: https://github.com/libvips/libvips/commit/00622428bda8d7521db8d74260b519fa41d69d0a



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8ad5429c6721c6aa2b0076b8c812a6748e612cfd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8ad5429c6721c6aa2b0076b8c812a6748e612cfd
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190127/bb616a3d/attachment.html>