[pkg-GD-devel] Bug#829062: libgd2: CVE-2016-6128: Invalid color index is not properly handled leading to denial of service

Salvatore Bonaccorso carnil at debian.org
Thu Jun 30 07:32:34 UTC 2016


Source: libgd2
Version: 2.1.0-5
Severity: important
Tags: security upstream patch fixed-upstream

Hi,

the following vulnerability was published for libgd2.

CVE-2016-6128[0]:
Invalid color index is not properly handled leading to denial of service

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-6128
[1] https://github.com/libgd/libgd/compare/3fe0a71...6ff72ae

Regards,
Salvatore



More information about the pkg-GD-devel mailing list