[SECURITY] [DSA 3587-1] libgd2 security update

2016-05-2714:53:49

lists.debian.org

7.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON

Debian Security Advisory DSA-3587-1 [email protected]
https://www.debian.org/security/ Salvatore Bonaccorso
May 27, 2016 https://www.debian.org/security/faq

Package : libgd2
CVE ID : CVE-2013-7456 CVE-2015-8874 CVE-2015-8877
Debian Bug : 824627

Several vulnerabilities were discovered in libgd2, a library for
programmatic graphics creation and manipulation. A remote attacker can
take advantage of these flaws to cause a denial-of-service against an
application using the libgd2 library.

For the stable distribution (jessie), these problems have been fixed in
version 2.1.0-5+deb8u3.

For the unstable distribution (sid), these problems have been fixed in
version 2.2.1-1 or earlier.

We recommend that you upgrade your libgd2 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian8ppc64elphp5-phpdbg< 5.6.22+dfsg-0+deb8u1php5-phpdbg_5.6.22+dfsg-0+deb8u1_ppc64el.deb
Debian8armhfphp5-cli< 5.6.22+dfsg-0+deb8u1php5-cli_5.6.22+dfsg-0+deb8u1_armhf.deb
Debian8armellibgd-tools< 2.1.0-5+deb8u3libgd-tools_2.1.0-5+deb8u3_armel.deb
Debian8arm64libgd-dev< 2.1.0-5+deb8u3libgd-dev_2.1.0-5+deb8u3_arm64.deb
Debian8mipslibapache2-mod-php5filter< 5.6.22+dfsg-0+deb8u1libapache2-mod-php5filter_5.6.22+dfsg-0+deb8u1_mips.deb
Debian8mipselphp5-xsl< 5.6.12+dfsg-0+deb8u1php5-xsl_5.6.12+dfsg-0+deb8u1_mipsel.deb
Debian8amd64php5-snmp< 5.6.22+dfsg-0+deb8u1php5-snmp_5.6.22+dfsg-0+deb8u1_amd64.deb
Debian8arm64php5-pspell< 5.6.22+dfsg-0+deb8u1php5-pspell_5.6.22+dfsg-0+deb8u1_arm64.deb
Debian8ppc64elphp5-sqlite< 5.6.12+dfsg-0+deb8u1php5-sqlite_5.6.12+dfsg-0+deb8u1_ppc64el.deb
Debian8kfreebsd-i386php5-snmp< 5.6.22+dfsg-0+deb8u1php5-snmp_5.6.22+dfsg-0+deb8u1_kfreebsd-i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	ppc64el	php5-phpdbg	< 5.6.22+dfsg-0+deb8u1	php5-phpdbg_5.6.22+dfsg-0+deb8u1_ppc64el.deb
Debian	8	armhf	php5-cli	< 5.6.22+dfsg-0+deb8u1	php5-cli_5.6.22+dfsg-0+deb8u1_armhf.deb
Debian	8	armel	libgd-tools	< 2.1.0-5+deb8u3	libgd-tools_2.1.0-5+deb8u3_armel.deb
Debian	8	arm64	libgd-dev	< 2.1.0-5+deb8u3	libgd-dev_2.1.0-5+deb8u3_arm64.deb
Debian	8	mips	libapache2-mod-php5filter	< 5.6.22+dfsg-0+deb8u1	libapache2-mod-php5filter_5.6.22+dfsg-0+deb8u1_mips.deb
Debian	8	mipsel	php5-xsl	< 5.6.12+dfsg-0+deb8u1	php5-xsl_5.6.12+dfsg-0+deb8u1_mipsel.deb
Debian	8	amd64	php5-snmp	< 5.6.22+dfsg-0+deb8u1	php5-snmp_5.6.22+dfsg-0+deb8u1_amd64.deb
Debian	8	arm64	php5-pspell	< 5.6.22+dfsg-0+deb8u1	php5-pspell_5.6.22+dfsg-0+deb8u1_arm64.deb
Debian	8	ppc64el	php5-sqlite	< 5.6.12+dfsg-0+deb8u1	php5-sqlite_5.6.12+dfsg-0+deb8u1_ppc64el.deb
Debian	8	kfreebsd-i386	php5-snmp	< 5.6.22+dfsg-0+deb8u1	php5-snmp_5.6.22+dfsg-0+deb8u1_kfreebsd-i386.deb