Accepted libgd2 2.2.4-2+deb9u4 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 02 Feb 2019 10:49:03 +0100
Source: libgd2
Binary: libgd-tools libgd-dev libgd3
Architecture: source
Version: 2.2.4-2+deb9u4
Distribution: stretch-security
Urgency: high
Maintainer: GD team <pkg-gd-devel@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 920645 920728
Description:
libgd-dev - GD Graphics Library (development version)
libgd-tools - GD command line tools and example code
libgd3 - GD Graphics Library
Changes:
libgd2 (2.2.4-2+deb9u4) stretch-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Heap-based buffer overflow in gdImageColorMatch (CVE-2019-6977)
(Closes: #920645)
* Potential double-free in gdImage*Ptr() (CVE-2019-6978) (Closes: #920728)
Checksums-Sha1:
fab60b8ba18d41caa1ede6f9c629b0fb023f9b80 2346 libgd2_2.2.4-2+deb9u4.dsc
f2825f40ee181d22ac7c7a332662980f52484377 30244 libgd2_2.2.4-2+deb9u4.debian.tar.xz
Checksums-Sha256:
10d21c630e27d5984d71ee8c9df57431438f4f9198975d27070f36f4b3bb1351 2346 libgd2_2.2.4-2+deb9u4.dsc
99207705ac51c2e6ec915987531feadfbd5ab3fabd6c97998501d866443f88ef 30244 libgd2_2.2.4-2+deb9u4.debian.tar.xz
Files:
8caef9413ab03bc2a0dc20e372fea579 2346 graphics optional libgd2_2.2.4-2+deb9u4.dsc
7070ecdee544d47e607f223374593af4 30244 graphics optional libgd2_2.2.4-2+deb9u4.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=yNy+
-----END PGP SIGNATURE-----