Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 454
Alerts This Week
Warning Icon 1 454

Fedora 24 GD Update: FEDORA-2016-e45a7e7b13 Critical Buffer Overflow

fedora
Calendar Grey December 16, 2016
Dist Fedora Esm H88
Acquire crucial updates for Fedora 24: gmp library resolving various high-severity vulnerabilities to maintain system reliability.
- Security fix for CVE-2016-8670 - Security fix for CVE-2016-6911 - Security fix for CVE-2016-7568 - For Fedora 26 disabled two tests - they are failing because of freetype 2.7 (ht...

Summary

The gd graphics library allows your code to quickly draw images

complete with lines, arcs, text, multiple colors, cut and paste from

other images, and flood fills, and to write out the result as a PNG or

JPEG file. This is particularly useful in Web applications, where PNG

and JPEG are two of the formats accepted for inline images by most

browsers. Note that gd is not a paint program.

Update Information:

- Security fix for CVE-2016-8670 - Security fix for CVE-2016-6911 - Security fix for CVE-2016-7568 - For Fedora 26 disabled two tests - they are failing because of freetype 2.7 (https://github.com/libgd/libgd/issues/302, https://github.com/libgd/libgd/issues/217)

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical software update security fix gd library

Change Log

References


[ 1 ] Bug #1380450 - CVE-2016-7568 gd, php: Integer overflow in gdImageWebpCtx https://bugzilla.redhat.com/show_bug.cgi?id=1380450 [ 2 ] Bug #1388787 - CVE-2016-6911 gd, php: Missing check for OOB read in dynamicGetbuf() https://bugzilla.redhat.com/show_bug.cgi?id=1388787 [ 3 ] Bug #1391068 - CVE-2016-8670 gd, php: Stack based buffer overflow in dynamicGetbuf https://bugzilla.redhat.com/show_bug.cgi?id=1391068

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade gd' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: gd
Product: Fedora 24
Version: 2.2.3
Release: 5.fc24
URL: https://libgd.github.io/
Summary: A graphics library for quick creation of PNG or JPEG images

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical software update security fix gd library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.