Red Hat Security AdvisoryRHSA-2018:0406
php security update
Released 2018-03-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) php-5.4.16-43.el7_4.1, php-bcmath-5.4.16-43.el7_4.1, php-cli-5.4.16-43.el7_4.1 +22
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) php-5.4.16-43.el7_4.1, php-bcmath-5.4.16-43.el7_4.1, php-cli-5.4.16-43.el7_4.1 +22
- Red Hat Enterprise Linux Server (v. 7) php-5.4.16-43.el7_4.1, php-cli-5.4.16-43.el7_4.1, php-common-5.4.16-43.el7_4.1 +11
- Red Hat Enterprise Linux Server Optional (v. 7) php-bcmath-5.4.16-43.el7_4.1, php-dba-5.4.16-43.el7_4.1, php-devel-5.4.16-43.el7_4.1 +8
- Red Hat Enterprise Linux Workstation (v. 7) php-5.4.16-43.el7_4.1, php-cli-5.4.16-43.el7_4.1, php-common-5.4.16-43.el7_4.1 +11
- Red Hat Enterprise Linux Workstation Optional (v. 7) php-bcmath-5.4.16-43.el7_4.1, php-dba-5.4.16-43.el7_4.1, php-devel-5.4.16-43.el7_4.1 +8
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) php-5.4.16-43.el7_4.1, php-cli-5.4.16-43.el7_4.1, php-common-5.4.16-43.el7_4.1 +11
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) php-bcmath-5.4.16-43.el7_4.1, php-dba-5.4.16-43.el7_4.1, php-devel-5.4.16-43.el7_4.1 +8
Fixes 1 record
Priority LOW 35
The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.03418 · Published 2017-08-02 · Partial fix CWE-200
