Package: php5
Tags: security

Hi,

A security issue has been reported against the GD extension in PHP:

> Buffer overflow in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3
> allows context-dependent attackers to execute arbitrary code via a long
> argument to the imagepsloadfont function.  

I've tried to assess whether Debian is vulnerable to this, but cannot come to 
a definitive "yes" or "no". Could you please investigate?


thanks
Thijs

Attachment: pgpAeAUaGm9Ct.pgp
Description: PGP signature

Reply via email to