Thorsten Alteholz pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
76d4a8c9 by Thorsten Alteholz at 2024-04-07T01:22:01+02:00
Reserve DLA-3781-1 for libgd2
- - - - -
2 changed files:
- data/CVE/list
- data/DLA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -186661,7 +186661,6 @@ CVE-2021-40813 (A cross-site scripting (XSS)
vulnerability in the "Zip content"
CVE-2021-40812 (The GD Graphics Library (aka LibGD) through 2.3.2 has an
out-of-bounds ...)
- libgd2 2.3.3-1
[bullseye] - libgd2 <no-dsa> (Minor issue)
- [buster] - libgd2 <no-dsa> (Minor issue)
[stretch] - libgd2 <no-dsa> (Minor issue)
NOTE: https://github.com/libgd/libgd/issues/750#issuecomment-914872385
NOTE:
https://github.com/libgd/libgd/commit/6f5136821be86e7068fcdf651ae9420b5d42e9a9
@@ -193578,7 +193577,6 @@ CVE-2021-38116
CVE-2021-38115 (read_header_tga in gd_tga.c in the GD Graphics Library (aka
LibGD) thr ...)
- libgd2 2.3.3-1 (bug #991912)
[bullseye] - libgd2 <no-dsa> (Minor issue)
- [buster] - libgd2 <no-dsa> (Minor issue)
[stretch] - libgd2 <no-dsa> (Minor issue)
NOTE: https://github.com/libgd/libgd/issues/697
NOTE:
https://github.com/libgd/libgd/commit/8b111b2b4a4842179be66db68d84dda91a246032
(gd-2.3.3~1)
@@ -392700,7 +392698,6 @@ CVE-2018-14554
CVE-2018-14553 (gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a
NULL point ...)
{DLA-2106-1}
- libgd2 2.3.0-1 (low; bug #951287)
- [buster] - libgd2 <no-dsa> (Minor issue)
[stretch] - libgd2 <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1599032
NOTE:
https://github.com/libgd/libgd/commit/a93eac0e843148dc2d631c3ba80af17e9c8c860f
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[07 Apr 2024] DLA-3781-1 libgd2 - security update
+ {CVE-2018-14553 CVE-2021-38115 CVE-2021-40812}
+ [buster] - libgd2 2.2.5-5.2+deb10u1
[06 Apr 2024] DLA-3780-1 jetty9 - security update
{CVE-2024-22201}
[buster] - jetty9 9.4.50-4+deb10u2
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/76d4a8c99d0fc8ac68e6445b1ecea5a7573d43e7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/76d4a8c99d0fc8ac68e6445b1ecea5a7573d43e7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
