gd-2.0.35-11.0.1.AXS4

GD is an open source code library for the dynamic creation of images by
programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other
formats.

Security Fix(es):

gd: Integer overflow in _gd2GetHeader() resulting in heap overflow
(CVE-2016-5766)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE(s):
CVE-2016-5766
Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.