[SECURITY] [DLA 482-1] libgd2 security update

2016-05-1917:58:42

lists.debian.org

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.035 Low

EPSS

Percentile

91.4%

JSON

Package : libgd2
Version : 2.0.36~rc1~dfsg-6.1+deb7u3
CVE ID : CVE-2015-8874
Debian Bug : 824627

It was discovered that there was a stack consumption vulnerability
in the libgd2 graphics library which allowed remote attackers to
cause a denial of service via a crafted imagefilltoborder call.

For Debian 7 "Wheezy", this issue has been fixed in libgd2 version
2.0.36~rc1~dfsg-6.1+deb7u3.

We recommend that you upgrade your libgd2 packages.

Regards,

  ,&#x27;&#x27;`.
 : :&#x27;  :     Chris Lamb
 `. `&#x27;`      [email protected] / chris-lamb.co.uk
   `-

OSVersionArchitecturePackageVersionFilename
Debian8mipsellibgd-tools< 2.1.0-5+deb8u3libgd-tools_2.1.0-5+deb8u3_mipsel.deb
Debian8amd64php5-common< 5.6.12+dfsg-0+deb8u1php5-common_5.6.12+dfsg-0+deb8u1_amd64.deb
Debian8mipselphp5-enchant< 5.6.12+dfsg-0+deb8u1php5-enchant_5.6.12+dfsg-0+deb8u1_mipsel.deb
Debian8arm64libapache2-mod-php5filter< 5.6.12+dfsg-0+deb8u1libapache2-mod-php5filter_5.6.12+dfsg-0+deb8u1_arm64.deb
Debian8s390xphp5-odbc< 5.6.12+dfsg-0+deb8u1php5-odbc_5.6.12+dfsg-0+deb8u1_s390x.deb
Debian7armellibgd2-noxpm-dev< 2.0.36~rc1~dfsg-6.1+deb7u3libgd2-noxpm-dev_2.0.36~rc1~dfsg-6.1+deb7u3_armel.deb
Debian8powerpcphp5-odbc< 5.6.12+dfsg-0+deb8u1php5-odbc_5.6.12+dfsg-0+deb8u1_powerpc.deb
Debian8i386php5-imap< 5.6.12+dfsg-0+deb8u1php5-imap_5.6.12+dfsg-0+deb8u1_i386.deb
Debian8amd64php5-xsl< 5.6.12+dfsg-0+deb8u1php5-xsl_5.6.12+dfsg-0+deb8u1_amd64.deb
Debian8powerpcphp5-sqlite< 5.6.12+dfsg-0+deb8u1php5-sqlite_5.6.12+dfsg-0+deb8u1_powerpc.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	mipsel	libgd-tools	< 2.1.0-5+deb8u3	libgd-tools_2.1.0-5+deb8u3_mipsel.deb
Debian	8	amd64	php5-common	< 5.6.12+dfsg-0+deb8u1	php5-common_5.6.12+dfsg-0+deb8u1_amd64.deb
Debian	8	mipsel	php5-enchant	< 5.6.12+dfsg-0+deb8u1	php5-enchant_5.6.12+dfsg-0+deb8u1_mipsel.deb
Debian	8	arm64	libapache2-mod-php5filter	< 5.6.12+dfsg-0+deb8u1	libapache2-mod-php5filter_5.6.12+dfsg-0+deb8u1_arm64.deb
Debian	8	s390x	php5-odbc	< 5.6.12+dfsg-0+deb8u1	php5-odbc_5.6.12+dfsg-0+deb8u1_s390x.deb
Debian	7	armel	libgd2-noxpm-dev	< 2.0.36~rc1~dfsg-6.1+deb7u3	libgd2-noxpm-dev_2.0.36~rc1~dfsg-6.1+deb7u3_armel.deb
Debian	8	powerpc	php5-odbc	< 5.6.12+dfsg-0+deb8u1	php5-odbc_5.6.12+dfsg-0+deb8u1_powerpc.deb
Debian	8	i386	php5-imap	< 5.6.12+dfsg-0+deb8u1	php5-imap_5.6.12+dfsg-0+deb8u1_i386.deb
Debian	8	amd64	php5-xsl	< 5.6.12+dfsg-0+deb8u1	php5-xsl_5.6.12+dfsg-0+deb8u1_amd64.deb
Debian	8	powerpc	php5-sqlite	< 5.6.12+dfsg-0+deb8u1	php5-sqlite_5.6.12+dfsg-0+deb8u1_powerpc.deb