Red Hat Security AdvisoryRHSA-2017:3221
php security update
Released 2017-11-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) php-5.4.16-43.el7_4, php-bcmath-5.4.16-43.el7_4, php-cli-5.4.16-43.el7_4 +22
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) php-5.4.16-43.el7_4, php-bcmath-5.4.16-43.el7_4, php-cli-5.4.16-43.el7_4 +22
- Red Hat Enterprise Linux Server (v. 7) php-5.4.16-43.el7_4, php-cli-5.4.16-43.el7_4, php-common-5.4.16-43.el7_4 +11
- Red Hat Enterprise Linux Server Optional (v. 7) php-bcmath-5.4.16-43.el7_4, php-dba-5.4.16-43.el7_4, php-devel-5.4.16-43.el7_4 +8
- Red Hat Enterprise Linux Workstation (v. 7) php-5.4.16-43.el7_4, php-cli-5.4.16-43.el7_4, php-common-5.4.16-43.el7_4 +11
- Red Hat Enterprise Linux Workstation Optional (v. 7) php-bcmath-5.4.16-43.el7_4, php-dba-5.4.16-43.el7_4, php-devel-5.4.16-43.el7_4 +8
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) php-5.4.16-43.el7_4, php-cli-5.4.16-43.el7_4, php-common-5.4.16-43.el7_4 +11
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) php-bcmath-5.4.16-43.el7_4, php-dba-5.4.16-43.el7_4, php-devel-5.4.16-43.el7_4 +8
Fixes 2 records
Priority MEDIUM 40
Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.03715 · Published 2017-03-15 · Partial fix CWE-190
Priority LOW 31
The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.03736 · Published 2017-03-15 · Partial fix CWE-20
