Change Id->FreeBSD.5133141363
php-gd and gd -- Buffer over-read into uninitialized memoryentered 2017-09-26
Port details
graphics/gd 2.3.3_13,1
Graphics library for fast creation of images
Port info
- Maintainer
- dinoex@FreeBSD.org
- Packages
- latest: 2.3.3_13,1
- Upstream
- up to date
- Last update
- to 2.3.3_13,1 · 974099d0bd
- Quarterly
- 2026Q4: 2.3.3_13,1
- Formerly
- graphics/gd-nox11 until 2003-08-19, graphics/gd2 until 2003-08-19
- WWW
- https://libgd.github.io/
- Links
- cgit · VuXML
Install
- Package
# pkg install libgdinstalls 2.3.3_13,1 fromlatest; fromquarterly(2026Q4) 2.3.3_13,1- Port
# cd /usr/ports/graphics/gd && make install clean# make -C /usr/ports/graphics/gd config # change options first
- Size
- 223 KiB download · 1.6 MiB installed
- Depends on
- graphics/jpeg-turbo 3.1.4.1, graphics/png 1.6.59_1, graphics/tiff 4.7.2, graphics/webp 1.6.0, print/freetype2 2.14.3, x11-fonts/fontconfig 2.18.3,1
- License
- MIT
- Options
- 7 of 13 on in the package: FONTCONFIG FREETYPE ICONV JPEG PNG TIFF WEBP
Show the 6 options that are off
AVIF HEIF LIQ RAQM THREADS XPM
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2.3.3_13,1 | 2.3.3_13,1 | – |
| FreeBSD 15 | 2.3.3_13,1 | 2.3.3_13,1 | – |
| FreeBSD 14 | 2.3.3_13,1 | 2.3.3_13,1 | 2.3.3_13,1 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2.3.3_13,1 | 2.3.3_13,1 | – |
| FreeBSD 14 | 2.3.3_13,1 | 2.3.3_13,1 | 2.3.3_13,1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 2.3.3_13,1.Fixed (2)
Show 2 fixed
VuXML entries whose affected range the packaged version has left.
libgd -- Denial of servica via double freeentered 2017-09-26
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (213)
Bump 'Version Required' to reflect reality.d35d70ac63
Reroll md5 and tell gd where our libraries are found. The compile was coming out as:
.... -L${exec_prefix}/lib ....
which obviously doesn't work.84c6dff533Install the header files in the right place and make this port package again after the upgrade. PR: 12889d12f38feff
Upgrade to 1.6.2 which gets us out of hot water with licensing problems. This also will inadvertently unbreak parts of apache13-php3, I believe, which is why I was able to work on this in the middle of a major project that requires it. Sponsored Committer With Overtime: Computer Horizons Corp.57806deb74
Mark these RESTRICTED, there seems to be a legal problem with the distfiles. From their http site: The gd library is temporarily available. We have taken it off the site until we are able to arrive at an agreement with Unisys regarding their legal position with respect to gd. Please do not send email asking for the gd library at this time. We cannot send it to you, at least until this matter is resolved. Thank you for your understanding. Boutell.Com, Inc. Reported by: "Stephen J. Roznowski" <sjr@home.net>830c04a578
1. The distfile changed but without bump version number. 2. Add another MASTER_SITE. Noticed by: phk9cdd128d36
Add -b to fetch's args since the master site doesn't seem to play TCP the right way.9455416a54
Upgrade to 1.3. PR: ports/6146 Submitted by: Jeffrey Wheat <jeff@ns1.cetlink.net>e1e01a2994
Add appropriate @dirrm statements.a98fa1caa8
A new port (php) needs additional header files from this package. Added necessary changes to install the missing ones as well. Updated the PLIST and tested make package ;-)f50d39ab11
MASTER_SITES is usually put right after CATEGORIES.b3a8969fd0
Import of gd, a graphics library for fast GIF creation. Closes PR #2619. Submitted by: jeff@cetlink.net1b53e562c3