Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#62525 - [gd] AVG-865

Attached to Project: Arch Linux
Opened by Muflone (muflone) - Wednesday, 01 May 2019, 23:47 GMT
Last edited by Pierre Schmitz (Pierre) - Sunday, 12 May 2019, 10:50 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To No-one
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

I'm unsure if a bug was really needed but the gd package is affected from many serious vulnerabilities listed as AVG-865 in the security page https://security.archlinux.org/package/gd

I believe all those CVE can be fixed by applying the referenced patches.

Additional info:
* gd 2.2.5-1
* https://security.archlinux.org/package/gd
This task depends upon

Closed by  Pierre Schmitz (Pierre)
Sunday, 12 May 2019, 10:50 GMT
Reason for closing:  Fixed

Loading...