Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Fedora 25: 2016-722c0afc64 Critical: gd Buffer Overflow and Flaws

fedora
Calendar Grey December 9, 2016
Scroller Fedora Esm H88
This release resolves various vulnerabilities in the php library for Fedora 30, improving code execution integrity.
- Security fix for CVE-2016-8670 - Security fix for CVE-2016-6911 - Security fix for CVE-2016-7568 - For Fedora 26 disabled two tests - they are failing because of freetype 2.7 (ht...

Summary

The gd graphics library allows your code to quickly draw images

complete with lines, arcs, text, multiple colors, cut and paste from

other images, and flood fills, and to write out the result as a PNG or

JPEG file. This is particularly useful in Web applications, where PNG

and JPEG are two of the formats accepted for inline images by most

browsers. Note that gd is not a paint program.

Update Information:

- Security fix for CVE-2016-8670 - Security fix for CVE-2016-6911 - Security fix for CVE-2016-7568 - For Fedora 26 disabled two tests - they are failing because of freetype 2.7 (https://github.com/libgd/libgd/issues/302, https://github.com/libgd/libgd/issues/217)

Topics%20covered

Topics Covered

security advisory buffer overflow Fedora security flaw gd library

Change Log

References


[ 1 ] Bug #1380450 - CVE-2016-7568 gd, php: Integer overflow in gdImageWebpCtx https://bugzilla.redhat.com/show_bug.cgi?id=1380450 [ 2 ] Bug #1388787 - CVE-2016-6911 gd, php: Missing check for OOB read in dynamicGetbuf() https://bugzilla.redhat.com/show_bug.cgi?id=1388787 [ 3 ] Bug #1391068 - CVE-2016-8670 gd, php: Stack based buffer overflow in dynamicGetbuf https://bugzilla.redhat.com/show_bug.cgi?id=1391068

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade gd' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: gd
Product: Fedora 25
Version: 2.2.3
Release: 5.fc25
URL: https://libgd.github.io/
Summary: A graphics library for quick creation of PNG or JPEG images

Topics%20covered

Topics Covered

security advisory buffer overflow Fedora security flaw gd library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.