Re: [GD-DEVEL] 2.2.2 release, upgrade recommended
| From: | Remi Collet | Date: | Fri, 24 Jun 2016 14:07:49 +0000 |
| Subject: | Re: [GD-DEVEL] 2.2.2 release, upgrade recommended | ||
| References: | 1 | Groups: | php.gd.devel |
| Request: | Send a blank email to php-gd-devel+get-772@lists.php.net to get a copy of this message | ||
Le 24/06/2016 à 10:58, Pierre Joye a écrit :
> hi,
>
> 2.2.2 has been released and contains numerous fixes including security ones.
From changelog
* Integer Overflow in gdImagePaletteToTrueColor() resulting in heap
overflow (CVE-2016-5767)
=> looks like the patch is already in old versions
(checked 2.1.1)
* Integer Overflow in _gd2GetHeader() resulting in heap overflow
(CVE-2016-5766)
=> fix missing (see previous mail)
* NULL Pointer Dereference at _gdScaleVert
=> looks lkike the patch is already in old versions
(checked 2.1.1)
* Integer Overflow in gdImagePaletteToTrueColor() in heap overflow
=> duplicate of 1st entry ;)
Remi.
Attachment: [application/pgp-signature] OpenPGP digital signature signature.asc
Attachment: [application/pgp-signature] OpenPGP digital signature signature.asc