Accepted libgd2 2.2.4-2+deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 12 Aug 2017 07:14:26 +0200
Source: libgd2
Binary: libgd-tools libgd-dev libgd3
Architecture: source
Version: 2.2.4-2+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: GD team <pkg-gd-devel@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 869263
Description:
libgd-dev - GD Graphics Library (development version)
libgd-tools - GD command line tools and example code
libgd3 - GD Graphics Library
Changes:
libgd2 (2.2.4-2+deb9u1) stretch-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* CVE-2017-7890: Fix unitialized memory read vulnerability in GIF reading
(Closes: #869263)
Checksums-Sha1:
792f19c28ea6175d1147a76bdb3438667a058b1f 2346 libgd2_2.2.4-2+deb9u1.dsc
67779817d7aecb94594c43ace949af350ca1df7f 2478528 libgd2_2.2.4.orig.tar.xz
fb9090605c55068b90699239a3f5ccd536a3989d 25408 libgd2_2.2.4-2+deb9u1.debian.tar.xz
Checksums-Sha256:
59270d7fd871175c1222a19e0a7444fed9c1724df7ceaf9ec817cd49bc51cc1a 2346 libgd2_2.2.4-2+deb9u1.dsc
137f13a7eb93ce72e32ccd7cebdab6874f8cf7ddf31d3a455a68e016ecd9e4e6 2478528 libgd2_2.2.4.orig.tar.xz
d7570a7365c923fb0b00966d1a937a9a63d5fce013bd05f427f3bcc48730c5b7 25408 libgd2_2.2.4-2+deb9u1.debian.tar.xz
Files:
0312a1c353520cfa53f569a1243687d6 2346 graphics optional libgd2_2.2.4-2+deb9u1.dsc
a244855a323a3ea1975d708eb1e12b7a 2478528 graphics optional libgd2_2.2.4.orig.tar.xz
d0fbe980f85008522df7b49ce6a70d49 25408 graphics optional libgd2_2.2.4-2+deb9u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=7iRt
-----END PGP SIGNATURE-----