oss-security - CVE Request: gd buffer read overflow in gd_gif

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <1331942598.1357562.1427122763719.JavaMail.zimbra@redhat.com>
Date: Mon, 23 Mar 2015 10:59:23 -0400 (EDT)
From: Francisco Alonso <falonsoe@...hat.com>
To: oss-security@...ts.openwall.com
Cc: cve-assign@...re.org
Subject: CVE Request: gd buffer read overflow in gd_gif_in.c

Hi,

Could a CVE be please assigned to the following issue? (in case it was
not requested to MITRE before):

gd: buffer read overflow in gd_gif_in.c
https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43
https://bugs.php.net/bug.php?id=68601
https://bugzilla.redhat.com/show_bug.cgi?id=1188639


Thank you


Francisco Alonso / Red Hat Product Security
PGP: 0xA026440E 0825 020C 7A5A 4F86 9038  B1C8 5562 688F A026 440E

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.