Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 415
Alerts This Week
Warning Icon 1 415

CentOS 8: 2021-9a5dfb4320 Critical: Kernel Memory Leak Patch

fedora
Calendar Grey April 30, 2016
Dist Fedora Esm H88
A patch has been issued for CVE-2016-3074 in the gd library on Fedora 23, resolving serious heap overflow vulnerabilities.
Security fix for CVE-2016-3074

Summary

The gd graphics library allows your code to quickly draw images

complete with lines, arcs, text, multiple colors, cut and paste from

other images, and flood fills, and to write out the result as a PNG or

JPEG file. This is particularly useful in Web applications, where PNG

and JPEG are two of the formats accepted for inline images by most

browsers. Note that gd is not a paint program.

Update Information:

Security fix for CVE-2016-3074

Topics%20covered

Topics Covered

security advisory Fedora security fix heap overflow gd library

Change Log

References


[ 1 ] Bug #1321893 - CVE-2016-3074 php: Signedness vulnerability causing heap overflow in libgd https://bugzilla.redhat.com/show_bug.cgi?id=1321893

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update gd' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: gd
Product: Fedora 23
Version: 2.1.1
Release: 5.fc23
URL: https://bitbucket.org
Summary: A graphics library for quick creation of PNG or JPEG images

Topics%20covered

Topics Covered

security advisory Fedora security fix heap overflow gd library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.