FreeBSD Bugzilla – Attachment 175199 Details for
Bug 213023
security/vuxml: Security vulnerability in libgd, php56-gd and php70-gd
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
Add libgd, php56-gd, php70-gd vulns to vuxml
file_213023.txt (text/plain), 1.58 KB, created by
VK
on 2016-09-27 14:06:25 UTC
(
hide
)
Description:
Add libgd, php56-gd, php70-gd vulns to vuxml
Filename:
MIME Type:
Creator:
VK
Created:
2016-09-27 14:06:25 UTC
Size:
1.58 KB
patch
obsolete
>Index: security/vuxml/vuln.xml >=================================================================== >--- security/vuxml/vuln.xml (revision 422812) >+++ security/vuxml/vuln.xml (working copy) >@@ -58,6 +58,40 @@ > * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) > --> > <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> >+ <vuln vid="2a526c78-84ab-11e6-a4a1-60a44ce6887b"> >+ <topic>libgd -- integer overflow which could lead to heap buffer overflow</topic> >+ <affects> >+ <package> >+ <name>gd</name> >+ <range><le>2.2.3</le></range> >+ </package> >+ <package> >+ <name>php70-gd</name> >+ <range><le>7.0.11</le></range> >+ </package> >+ <package> >+ <name>php56-gd</name> >+ <range><le>5.6.26</le></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>LibGD reports:</p> >+ <blockquote cite="https://github.com/libgd/libgd/issues/308"> >+ <p>An integer overflow issue was found in function gdImageWebpCtx of file gd_webp.c which could lead to heap buffer overflow.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://github.com/libgd/libgd/issues/308</url> >+ <url>https://bugs.php.net/bug.php?id=73003</url> >+ </references> >+ <dates> >+ <discovery>2016-09-02</discovery> >+ <entry>2016-09-27</entry> >+ </dates> >+ </vuln> >+ > <vuln vid="91a337d8-83ed-11e6-bf52-b499baebfeaf"> > <topic>OpenSSL -- multiple vulnerabilities</topic> > <affects>
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 213023
: 175199