Your message dated Sun, 06 Nov 2016 23:04:10 +0000 with message-id <e1c3wty-000gar...@fasolo.debian.org> and subject line Bug#840806: fixed in libgd2 2.2.3-87-gd0fec80-2 has caused the Debian Bug report #840806, regarding libgd2: CVE-2016-6911: invalid read in gdImageCreateFromTiffPtr() to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 840806: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840806 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: libgd2 Version: 2.1.0-5 Severity: grave Tags: security upstream patch Control: fixed -1 2.1.0-5+deb8u7 For tracking the isssue. DSA-3693-1 included the patch 0020-Fix-invalid-read-in-gdImageCreateFromTiffPtr.patch to fix: > Subject: Fix invalid read in gdImageCreateFromTiffPtr() with patch included in the 2.1.0-5+deb8u7 upload. Regards, Salvatore
--- End Message ---
--- Begin Message ---Source: libgd2 Source-Version: 2.2.3-87-gd0fec80-2 We believe that the bug you reported is fixed in the latest version of libgd2, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 840...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Ondřej Surý <ond...@debian.org> (supplier of updated libgd2 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 06 Nov 2016 23:38:28 +0100 Source: libgd2 Binary: libgd-tools libgd-dev libgd3 Architecture: source Version: 2.2.3-87-gd0fec80-2 Distribution: unstable Urgency: medium Maintainer: GD team <pkg-gd-de...@lists.alioth.debian.org> Changed-By: Ondřej Surý <ond...@debian.org> Description: libgd-dev - GD Graphics Library (development version) libgd-tools - GD command line tools and example code libgd3 - GD Graphics Library Closes: 840806 Changes: libgd2 (2.2.3-87-gd0fec80-2) unstable; urgency=medium . * [CVE-2016-6911]: Fix invalid read in gdImageCreateFromTiffPtr() (Closes: #840806) Checksums-Sha1: 9123a601d3138d9432c2ff3ce068dc498751d53a 2363 libgd2_2.2.3-87-gd0fec80-2.dsc c6249f343cd0471ca5e1a8bfd62cac7572e1ebbb 26940 libgd2_2.2.3-87-gd0fec80-2.debian.tar.xz Checksums-Sha256: fb07d6d50e132696c4133949c317c24b430f52748d1b39b4904e900cb83c6d98 2363 libgd2_2.2.3-87-gd0fec80-2.dsc e3d5fdcd9b05ba919650e2ef79bebb0f3e310cc0d080d79461a2a3c405869c90 26940 libgd2_2.2.3-87-gd0fec80-2.debian.tar.xz Files: e5a5e3b76a1d0d44cf255f00a59eb399 2363 graphics optional libgd2_2.2.3-87-gd0fec80-2.dsc 76880184a6a1f838a7388d0d0a441390 26940 graphics optional libgd2_2.2.3-87-gd0fec80-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQJ8BAEBCgBmBQJYH7KiXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQzMEI5MzNEODBGQ0UzRDk4MUEyRDM4RkIw Qzk5QjcwRUY0RkNCQjA3AAoJEAyZtw70/LsHp+0P/RFnlksPwhEXQMUazTbjA4h2 bs81mmY2PLf2Wuf27lw+5anAxef6sqUADeOwKRbgB2rsY/0FbeSKBmXQN6bwrFl2 AyXgNhaQelLv/R8lW+9I75A3mUofWaBnVQkzJ70AnOHVlcx72uBYpqAjjFCCNOeZ ppzSIeNtU3WVAsplrHyzawaPheSLmOGqkPczNny/pvQlLnS6vFXM/o1tAMRIwyyV 7QbEIVZkl5mKoH8XDsctCmGJ75I+fAzwOV7wYFPBtPlh3fANkHZe9naox4SkXXBO FUoChJyLoFB0KsZyyD8m+qgxMifRPJjInLo47Jx2XEub9i5gza+4RM4UDKsz8s49 urwNRvzsJavMN/bOQ5tItftQeUmFAFo1mG5SaUqeBb64S+JCz8egdcDZi2WI+lex BQum5mq9stn84Mtyu+TotPWqXaNqzKDmRlmdpP7q1VIeezcY2zxq76wFmFJxEIWn NkuT9B1g2XaEBFLNxCvteE9TXr97S5zdMVTRLVAv2qMqN1GVABac9oUxct84rOON 6lWfTsYgsHvpzTZG4TbouUm+y01CqPnLlxXbvo8gTltRnCA5Ti3lE+hR0I9Rgbs6 nCrw20wdcUZmS0iYKfIbHZMiCv4TFgyTFhQ8x2kt2JZz+uFGJ39zuJcDeuwIkAoe ucgwPf3EKZDQW1Yj31Kd =YBLG -----END PGP SIGNATURE-----
--- End Message ---
