php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #55235 vulnerability issue was found in libpng 1.2.44 which was used by PHP 5.3.7 RC3
Submitted: 2011-07-18 13:56 UTC Modified: 2011-07-20 18:49 UTC
From: jym2307 at gmail dot com Assigned: pajoye (profile)
Status: Closed Package: GD related
PHP Version: 5.3.7RC3 OS: windows
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: jym2307 at gmail dot com
New email:
PHP Version: OS:

 

 [2011-07-18 13:56 UTC] jym2307 at gmail dot com 
Description:
------------
HI,

A venerability issue was found in libpng 1.2.44 which was used by PHP
5.3.7 RC3. See PHP/ext/gd

http://old.nabble.com/libpng-1.5.4%2C-1.4.8%2C-1.2.45%2C-and-1.0.55-are-available-
to32013073.html#a32013073

I was wondering is it possible to upgrade the Libpng in PHP 5.3.7 (RC 4)?

Thanks,
James

Test script:
---------------
NA

Expected result:
----------------
NA

Actual result:
--------------
NA

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2011-07-18 14:38 UTC] pajoye@php.net
-Status: Open +Status: Assigned -Type: Security +Type: Bug -Assigned To: +Assigned To: pajoye
 [2011-07-18 14:38 UTC] pajoye@php.net 
No need to make it closed as you posted it on internals anyway and the CVE is 
public.
 [2011-07-19 06:27 UTC] pajoye@php.net
-Status: Assigned +Status: Closed
 [2011-07-19 06:27 UTC] pajoye@php.net 
This bug has been fixed in SVN.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.

 For Windows:

http://windows.php.net/snapshots/
 
Thank you for the report, and for helping us make PHP better.
 [2011-07-19 14:10 UTC] jym2307 at gmail dot com 
thanks pajoye!


will this be included in 5.3.7 RC4 ?
 [2011-07-19 16:07 UTC] pajoye@php.net 
yes, and 5.4+
 [2011-07-20 18:49 UTC] jym2307 at gmail dot com
-Summary: venerability issue was found in libpng 1.2.44 which was used by PHP 5.3.7 RC3 +Summary: vulnerability issue was found in libpng 1.2.44 which was used by PHP 5.3.7 RC3
 [2011-07-20 18:49 UTC] jym2307 at gmail dot com 
a
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Wed Feb 05 09:01:30 2025 UTC