Description of problem: PHP 5.2.3 release: http://www.php.net/releases/5_2_3.php Fixed possible infinite loop in imagecreatefrompng. (by Xavier Roche, CVE-2007-2756)
References: http://bugs.libgd.org/?do=details&task_id=86 http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_png.c?r1=1.4.2.7&r2=1.4.2.7.4.1&diff_format=u
This issue was addressed in: Red Hat Application Stack: http://rhn.redhat.com/errata/RHSA-2007-0891.html Red Hat Enterprise Linux: http://rhn.redhat.com/errata/RHSA-2007-0890.html http://rhn.redhat.com/errata/RHSA-2007-0889.html Fedora: updated to fixed upstream version
Comment #7 describes Errata where this issue was fixed in gd library embedded in php source code. This issue also affects gd packages as shipped in Red Hat Enterprise Linux 2.1, 3, 4, and 5. Similar commit as mentioned in comment #4, but in libgd CVS repository: http://cvs.php.net/viewcvs.cgi/gd/libgd/src/gd_png.c?r1=1.22&r2=1.23
Updated gd packages addressing this issue were released for Red Hat Enterprise Linux 4 and 5: https://rhn.redhat.com/errata/RHSA-2008-0146.html
Statement: Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates for libwmf in Red Hat Enterprise Linux 5 and 6. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.