Bug 595322

Summary:	media-libs/gd: Integer overflow in function gdImageWebpCtx of gd_webp.c
Product:	Gentoo Security	Reporter:	Ian Zimmerman <nobrowser>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Ian Zimmerman 2016-09-28 03:03:38 UTC

According to the announce on oss-security:

An integer overflow vulnerability was found in function gdImageWebpCtx of file
gd_webp.c in libgd. It could lead to heap buffer overflow circumstance. Both PHP
7.0.10 and libgd 2.2.3 were affected by this issue.

External link:
https://github.com/libgd/libgd/issues/308

Upstream patch:
https://github.com/libgd/libgd/commit/40bec0f.diff

Comment 1 Aaron Bauman (RETIRED) gentoo-dev

2016-11-11 06:48:58 UTC


*** This bug has been marked as a duplicate of bug 595540 ***