Every CVE Search/ Get API key

MGASA-2018-0085

Updated php & libgd packages fix security vulnerabilities

No scoreFix available

Potential infinite loop in gdImageCreateFromGifCtx (php#75571). Reflected XSS in .phar 404 page (php#74782).

What each source reports

OSV No score

Updated php & libgd packages fix security vulnerabilities

Potential infinite loop in gdImageCreateFromGifCtx (php#75571). Reflected XSS in .phar 404 page (php#74782).

Record
MGASA-2018-0085
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
php
Mageia:5
before 5.6.33-1.mga5
5.6.33-1.mga5
libgd
Mageia:5
before 2.2.5-1.1.mga5
2.2.5-1.1.mga5

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

MGASA-2018-0085 is a vulnerability with no CVSS score yet in php, published January 14, 2018. No source lists public exploit code. Fixed in php 5.6.33-1.mga5.

References

MoveEnter Open