drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Preisgabe von Informationen in gd
Name: |
Preisgabe von Informationen in gd |
|
ID: |
DSA-3938-1 |
|
Distribution: |
Debian |
|
Plattformen: |
Debian jessie, Debian stretch |
|
Datum: |
Sa, 12. August 2017, 16:39 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7890 |
|
Applikationen: |
gd |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
- ------------------------------------------------------------------------- Debian Security Advisory DSA-3938-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso August 12, 2017 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : libgd2 CVE ID : CVE-2017-7890 Debian Bug : 869263
Matviy Kotoniy reported that the gdImageCreateFromGifCtx() function used to load images from GIF format files in libgd2, a library for programmatic graphics creation and manipulation, does not zero stack allocated color map buffers before their use, which may result in information disclosure if a specially crafted file is processed.
For the oldstable distribution (jessie), this problem has been fixed in version 2.1.0-5+deb8u10.
For the stable distribution (stretch), this problem has been fixed in version 2.2.4-2+deb9u1.
We recommend that you upgrade your libgd2 packages.
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlmO9e5fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0SCVhAAk0unKNrQqvnzieUN9dm3xCKmHnn3msOrK+/WUEhwG1Genql/avk9vJCv 1Rb/GExb422o9BbFSddZDOSenNCnqJttRD7GNayAIdKlwcsjPfcsW5YO47wUIeuz 1WiKy1ez2ULRDqD5qfNWOdt+QJFmtpBrKodbiprxGbicxrPnwjT/vVOZBSJoLidy v1E9mszPLjfKrEmhxGLtwI/JwOnbQKklhcnVC5v8S7WlGRs425iQYn0GSFNEBxnI ieSL6K5in6C6/fnwGvWtj1ySiB9gzlxbF6ZMN4Gq/9CF9+Nl4FkKTxba8NtRsdI5 QfkJSxTZ4Ht/guJXc2fgfwG3NfIDlqJOBtGugmUISihVLMkSguTEE7WHzVFeg765 RBYDFpu8ITnCBv6Ob3UTauQ78b2TQ6zRmfTVGgDcIY3gowFFG5Ygpsjv6vgUVPPr ax6G7ePnk6hKIc+T6K++FJ7mUuW6s5SX4mUEz452tEnjdyL1xiTVqZl+OVqzBWEu hfmGQh1P09HLPPHw3H0OvBHWWfc2bUi0EdvAQ9/DNMThHnvCUh4Cnc23OaRRtKen uzmUVDFrWtGQsfhgsNFVZKoL1i+OeXXVMrT3GqKB0xmglxM51xuGoIVPvjcmrLpk wmhxt0j3edmPiqzayCll3G4SA/FNKJTJ8kWGv4AoROeQuPEFBvM= =84p8 -----END PGP SIGNATURE-----
|
|
|
|