Medium ELSA-2017-3221 2 CVEs

Moderate: php security update (Oracle Linux 7)

Published Nov 15, 2017 · Updated Nov 15, 2017

Ecosystem: Oracle Linux

Summary

[5.4.16-43]
- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168

Fixed packages 25

Release	Package	Fixed in
Oracle Linux · 7	php	0:5.4.16-43.el7_4
Oracle Linux · 7	php-bcmath	0:5.4.16-43.el7_4
Oracle Linux · 7	php-cli	0:5.4.16-43.el7_4
Oracle Linux · 7	php-common	0:5.4.16-43.el7_4
Oracle Linux · 7	php-dba	0:5.4.16-43.el7_4
Oracle Linux · 7	php-devel	0:5.4.16-43.el7_4
Oracle Linux · 7	php-embedded	0:5.4.16-43.el7_4
Oracle Linux · 7	php-enchant	0:5.4.16-43.el7_4
Oracle Linux · 7	php-fpm	0:5.4.16-43.el7_4
Oracle Linux · 7	php-gd	0:5.4.16-43.el7_4
Oracle Linux · 7	php-intl	0:5.4.16-43.el7_4
Oracle Linux · 7	php-ldap	0:5.4.16-43.el7_4
Oracle Linux · 7	php-mbstring	0:5.4.16-43.el7_4
Oracle Linux · 7	php-mysql	0:5.4.16-43.el7_4
Oracle Linux · 7	php-mysqlnd	0:5.4.16-43.el7_4
Oracle Linux · 7	php-odbc	0:5.4.16-43.el7_4
Oracle Linux · 7	php-pdo	0:5.4.16-43.el7_4
Oracle Linux · 7	php-pgsql	0:5.4.16-43.el7_4
Oracle Linux · 7	php-process	0:5.4.16-43.el7_4
Oracle Linux · 7	php-pspell	0:5.4.16-43.el7_4
Oracle Linux · 7	php-recode	0:5.4.16-43.el7_4
Oracle Linux · 7	php-snmp	0:5.4.16-43.el7_4
Oracle Linux · 7	php-soap	0:5.4.16-43.el7_4
Oracle Linux · 7	php-xml	0:5.4.16-43.el7_4
Oracle Linux · 7	php-xmlrpc	0:5.4.16-43.el7_4

Vulnerabilities 2

Unscored —

CVE-2016-10167

The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote atta…

libgd2 libgd2 gd Debian Ubuntu Alpine

Mar 15, 2017
Unscored —

CVE-2016-10168

Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspeci…

libgd2 libgd2 gd Debian Ubuntu Alpine

Mar 15, 2017