From 1d07100aaf40718df5ac7bf1a91287cf55182fc7 Mon Sep 17 00:00:00 2001 From: salo Date: Wed, 14 Jun 2006 21:42:33 +0000 Subject: Security fix for CVE-2006-2906: "The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote attackers to cause a denial of service (CPU consumption) via malformed GIF data that causes an infinite loop." Patch from Xavier Roche via Ubuntu. --- graphics/gd/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'graphics/gd/Makefile') diff --git a/graphics/gd/Makefile b/graphics/gd/Makefile index f8cbbe6b54c..62f23408cb5 100644 --- a/graphics/gd/Makefile +++ b/graphics/gd/Makefile @@ -1,7 +1,7 @@ -# $NetBSD: Makefile,v 1.69 2006/05/14 18:22:38 minskim Exp $ +# $NetBSD: Makefile,v 1.70 2006/06/14 21:42:33 salo Exp $ DISTNAME= gd-2.0.33 -PKGREVISION= 4 +PKGREVISION= 5 CATEGORIES= graphics MASTER_SITES= http://www.boutell.com/gd/http/ -- cgit v1.2.3