Your message dated Sat, 12 Aug 2017 15:02:08 +0000 with message-id <e1dgxvu-000ct2...@fasolo.debian.org> and subject line Bug#869263: fixed in libgd2 2.2.4-2+deb9u1 has caused the Debian Bug report #869263, regarding libgd2: CVE-2017-7890: Buffer over-read into uninitialized memory to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 869263: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869263 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: libgd2 Version: 2.2.4-2 Severity: important Tags: security upstream Forwarded: https://github.com/libgd/libgd/issues/399 Hi, the following vulnerability was published for libgd2. CVE-2017-7890[0]: Buffer over-read into uninitialized memory If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2017-7890 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7890 [1] https://github.com/libgd/libgd/issues/399 Please adjust the affected versions in the BTS as needed. Regards, Salvatore
--- End Message ---
--- Begin Message ---Source: libgd2 Source-Version: 2.2.4-2+deb9u1 We believe that the bug you reported is fixed in the latest version of libgd2, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 869...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <car...@debian.org> (supplier of updated libgd2 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 12 Aug 2017 07:14:26 +0200 Source: libgd2 Binary: libgd-tools libgd-dev libgd3 Architecture: source Version: 2.2.4-2+deb9u1 Distribution: stretch-security Urgency: high Maintainer: GD team <pkg-gd-de...@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <car...@debian.org> Closes: 869263 Description: libgd-dev - GD Graphics Library (development version) libgd-tools - GD command line tools and example code libgd3 - GD Graphics Library Changes: libgd2 (2.2.4-2+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * CVE-2017-7890: Fix unitialized memory read vulnerability in GIF reading (Closes: #869263) Checksums-Sha1: 792f19c28ea6175d1147a76bdb3438667a058b1f 2346 libgd2_2.2.4-2+deb9u1.dsc 67779817d7aecb94594c43ace949af350ca1df7f 2478528 libgd2_2.2.4.orig.tar.xz fb9090605c55068b90699239a3f5ccd536a3989d 25408 libgd2_2.2.4-2+deb9u1.debian.tar.xz Checksums-Sha256: 59270d7fd871175c1222a19e0a7444fed9c1724df7ceaf9ec817cd49bc51cc1a 2346 libgd2_2.2.4-2+deb9u1.dsc 137f13a7eb93ce72e32ccd7cebdab6874f8cf7ddf31d3a455a68e016ecd9e4e6 2478528 libgd2_2.2.4.orig.tar.xz d7570a7365c923fb0b00966d1a937a9a63d5fce013bd05f427f3bcc48730c5b7 25408 libgd2_2.2.4-2+deb9u1.debian.tar.xz Files: 0312a1c353520cfa53f569a1243687d6 2346 graphics optional libgd2_2.2.4-2+deb9u1.dsc a244855a323a3ea1975d708eb1e12b7a 2478528 graphics optional libgd2_2.2.4.orig.tar.xz d0fbe980f85008522df7b49ce6a70d49 25408 graphics optional libgd2_2.2.4-2+deb9u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlmOlY9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89ETXYP+wbjvp57uRPB6fhFriFQ0uPfs3HlXtHp j6Mav0Y1zokkXeVUgoZ+9s6sNqmSVB74cNHOxrNUUhKRhoA4nCDpExVM0Gy6qyiw 3tX3jQOXJPBQJPPEtgJpPch8Essu9bGlDiGmbBPvQJIr+7WxMosfmfrNwvbCA9Ij shs7i1n3eIRinVfESHC8xJuQo84//dY+wV/cZjivbJxxf45aedzfknt7ugTYgKzI 2iXzKMVRtJQIIyxYIvEciX6scInsgepmevJP7Rf6ud5voGIMZ/bng5ovNeF+oZLK 93mcykoy2y++5rnTuplOKOvW8Zqoe6kZ+2pOe5Tcs1aSh74qRVr7UwWPncsoIQNB x4FAuwXeORAIQ8A9CCXwihTRQEFAC/cymdQgmEq8XPKsL+iWd2lin8/etn0i0V+R lSFM4k9r8Lsk4BZ6B3XJRqU3GGqXDTS0j3KBlDzykXr1aAA/PabQNvyMW2Q7QAJj rpTBNWDNwVaatQ+Ev8EKNOCekxLmmzdQg8wUrS5USUJ+I2no3b8HjnkNHUAnafQk ZIwTu90gdnE4pSrAOXp7jAi/w6FXkmU/CMqVOXSfTChqrAuXG/i1e14902oL8+jz brWraN+zwiSl1lSCZXflL5/vltUvjOekHe5jXLpK6I+xBYwHsrFtQE+W7zXJpkw2 mcHWeE/OGkW5 =7iRt -----END PGP SIGNATURE-----
--- End Message ---
