[Git][security-tracker-team/security-tracker][master] Add CVE-2019-6799/libgd2
Salvatore Bonaccorso
carnil at debian.org
Sun Jan 27 08:26:12 GMT 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
8ad5429c by Salvatore Bonaccorso at 2019-01-27T08:24:46Z
Add CVE-2019-6799/libgd2
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,10 @@
CVE-2019-6977 (gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka ...)
- TODO: check
+ - libgd2 <unfixed>
+ - php7.3 7.3.1-1 (unimportant)
+ - php7.0 <removed> (unimportant)
+ - php5 <removed> (unimportant)
+ NOTE: Fixed in 5.6.40, 7.1.26, 7.2.14, 7.3.1
+ NOTE: PHP Bug: https://bugs.php.net/bug.php?id=77270
CVE-2019-6976 (libvips before 8.7.4 writes to uninitialized memory locations in ...)
- vips 8.7.4-1
NOTE: https://github.com/libvips/libvips/commit/00622428bda8d7521db8d74260b519fa41d69d0a
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8ad5429c6721c6aa2b0076b8c812a6748e612cfd
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8ad5429c6721c6aa2b0076b8c812a6748e612cfd
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190127/bb616a3d/attachment.html>
More information about the debian-security-tracker-commits
mailing list