[php-src] Issue #8903: Current bundled libgd has 15 CVEs, can it be upgraded at least in non-EOL PHPs?
| From: | drmuey | Date: | Thu, 30 Jun 2022 22:12:27 +0000 |
| Subject: | [php-src] Issue #8903: Current bundled libgd has 15 CVEs, can it be upgraded at least in non-EOL PHPs? | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-241843@lists.php.net to get a copy of this message | ||
Issue: https://github.com/php/php-src/issues/8903
Author: drmuey
### Description
Currently, the bundled libgd is at 2.1.0
[2.3](https://github.com/libgd/libgd/blob/GD-2.3/CHANGELOG.md) fixes 10 CVEs ATM
[2.2](https://github.com/libgd/libgd/blob/GD-2.2/CHANGELOG.md) fixes 4 CVEs ATM
[2.0.1](https://github.com/libgd/libgd/commit/463c3bd) 2.0.1 fixes 1 CVE
Thanks!