FEDORA-2017-ac3dd4ecf8 — security update for gd

stable

gd-2.2.5-1.fc27

FEDORA-2017-ac3dd4ecf8 created by remi 7 years ago for Fedora 27

Version 2.2.5 - 2017-08-30

Security
- Double-free in gdImagePngPtr(). CVE-2017-6362
- Buffer over-read into uninitialized memory. CVE-2017-7890
Fixed
- Fix #109: XBM reading fails with printed error
- Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
- Fix #357: 2.2.4: Segfault in test suite
- Fix #386: gdImageGrayScale() may produce colors
- Fix #406: webpng -i removes the transparent color
- Fix Coverity #155475: Failure to restore alphaBlendingFlag
- Fix Coverity #155476: potential resource leak
- Fix several build issues and test failures
- Fix and reenable optimized support for reading 1 bps TIFFs

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-ac3dd4ecf8

This update has been submitted for testing by remi.

7 years ago

This update has been pushed to testing.

7 years ago

pwalter commented & provided feedback 7 years ago

karma

Works

cairo provided feedback 7 years ago

karma

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

7 years ago

This update has been submitted for stable by remi.

7 years ago

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

Builds

gd-2.2.5-1.fc27

Automated Test Results

None