[Git][security-tracker-team/security-tracker][master] Reserve DLA-3781-1 for libgd2

[Thorsten Alteholz (@alteholz)]

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
76d4a8c9 by Thorsten Alteholz at 2024-04-07T01:22:01+02:00
Reserve DLA-3781-1 for libgd2

- - - - -


2 changed files:

- data/CVE/list
- data/DLA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -186661,7 +186661,6 @@ CVE-2021-40813 (A cross-site scripting (XSS) vulnerability in the "Zip content"
 CVE-2021-40812 (The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds ...)
 	- libgd2 2.3.3-1
 	[bullseye] - libgd2 <no-dsa> (Minor issue)
-	[buster] - libgd2 <no-dsa> (Minor issue)
 	[stretch] - libgd2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/libgd/libgd/issues/750#issuecomment-914872385
 	NOTE: https://github.com/libgd/libgd/commit/6f5136821be86e7068fcdf651ae9420b5d42e9a9
@@ -193578,7 +193577,6 @@ CVE-2021-38116
 CVE-2021-38115 (read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) thr ...)
 	- libgd2 2.3.3-1 (bug #991912)
 	[bullseye] - libgd2 <no-dsa> (Minor issue)
-	[buster] - libgd2 <no-dsa> (Minor issue)
 	[stretch] - libgd2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/libgd/libgd/issues/697
 	NOTE: https://github.com/libgd/libgd/commit/8b111b2b4a4842179be66db68d84dda91a246032 (gd-2.3.3~1)
@@ -392700,7 +392698,6 @@ CVE-2018-14554
 CVE-2018-14553 (gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL point ...)
 	{DLA-2106-1}
 	- libgd2 2.3.0-1 (low; bug #951287)
-	[buster] - libgd2 <no-dsa> (Minor issue)
 	[stretch] - libgd2 <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1599032
 	NOTE: https://github.com/libgd/libgd/commit/a93eac0e843148dc2d631c3ba80af17e9c8c860f


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[07 Apr 2024] DLA-3781-1 libgd2 - security update
+	{CVE-2018-14553 CVE-2021-38115 CVE-2021-40812}
+	[buster] - libgd2 2.2.5-5.2+deb10u1
 [06 Apr 2024] DLA-3780-1 jetty9 - security update
 	{CVE-2024-22201}
 	[buster] - jetty9 9.4.50-4+deb10u2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/76d4a8c99d0fc8ac68e6445b1ecea5a7573d43e7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/76d4a8c99d0fc8ac68e6445b1ecea5a7573d43e7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240406/9feca554/attachment.htm>