Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 27 Sep 2016 14:06:25 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-ports-bugs@FreeBSD.org
Subject:   [Bug 213023] security/vuxml: Security vulnerability in libgd, php56-gd and php70-gd
Message-ID:  <bug-213023-13@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D213023

            Bug ID: 213023
           Summary: security/vuxml: Security vulnerability in libgd,
                    php56-gd and php70-gd
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Keywords: patch, security
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-secteam@FreeBSD.org
          Reporter: vlad-fbsd@acheronmedia.com
                CC: ale@FreeBSD.org, tz@freebsd.org
          Assignee: ports-secteam@FreeBSD.org
             Flags: maintainer-feedback?(ports-secteam@FreeBSD.org)

Created attachment 175199
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D175199&action=
=3Dedit
Add libgd, php56-gd, php70-gd vulns to vuxml

Add vuln entries for libgd, php56-gd and php70-gd. CC maintainers of php56-=
gd
and php70-gd.

* Issue (with further links): https://github.com/libgd/libgd/issues/308

Note: The PHP issue is #73003, and the patches were added to master before =
the
5.6.26 and 7.0.11 were tagged, however it looks to me the fix did not end u=
p in
those PHP versions. The changelogs also don't mention #73003.

Someone please re-check after me, in case I missed something.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-213023-13>