[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: libgd security CVE-2016-7568
|
From: |
Leo Famulari |
|
Subject: |
Re: libgd security CVE-2016-7568 |
|
Date: |
Sat, 1 Oct 2016 12:27:59 -0400 |
|
User-agent: |
Mutt/1.7.0 (2016-08-17) |
On Sat, Oct 01, 2016 at 02:20:35PM +0200, Ludovic Courtès wrote:
> Leo Famulari <address@hidden> skribis:
>
> > This patches fixes an integer overflow in libgd:
> >
> > https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7568
> > http://seclists.org/oss-sec/2016/q3/639
> >
> > From b125d20c4e60cfd204a99fd7df174de73df067a2 Mon Sep 17 00:00:00 2001
> > From: Leo Famulari <address@hidden>
> > Date: Thu, 29 Sep 2016 11:32:34 -0400
> > Subject: [PATCH] gnu: gd: Fix CVE-2016-7568.
> >
> > * gnu/packages/patches/gd-CVE-2016-7568.patch: New file.
> > * gnu/local.mk (dist_patch_DATA): Add it.
> > * gnu/packages/gd.scm (gd)[source]: Use it.
>
> LGTM, thanks!
Pushed!