Catalin Enache f66465d4d5 gd : CVE-2016-10167, CVE-2016-10168
The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics
Library (aka libgd) before 2.2.4 allows remote attackers to cause a
denial of service (application crash) via a crafted image file.

Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before
2.2.4 allows remote attackers to have unspecified impact via vectors
involving the number of horizontal and vertical chunks in an image.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10167
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10168

Upstream patches:
fe9ed49daf
69d2fd2c59

Signed-off-by: Catalin Enache <catalin.enache@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-04-18 14:21:39 +02:00
2016-10-21 18:20:43 +02:00

Collection of layers for the OE-core universe

Please see the respective READMEs in the layer subdirectories

Description
Collection of OpenEmbedded layers
https://openembedded.org/
Readme 92 MiB
Languages
BitBake 85%
Shell 6.2%
C 3%
Roff 2.1%
NASL 1.9%
Other 1.6%