ELSA-2020-4659 — Moderate: gd security update (Oracle Linux 8)

Summary

* Fri Mar 27 2020 fjanus@redhat.com - 2.2.5-7
- Fix CVE-2018-14553 - Potential Null pointer dereference in gdImageClone
Resolves: RHBZ#1811788
- Fixed heap based buffer overflow in gd_color_match.c:gdImageColorMatch() in libgd as used in imagecolormatch()
Resolves: RHBZ#1678104 (CVE-2019-6977)
- Fixed potential double-free in gdImage*Ptr()
Resolves: RHBZ#1679002 (CVE-2019-6978)

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	gd	0:2.2.5-7.el8
Oracle Linux · 8	gd-devel	0:2.2.5-7.el8

Vulnerabilities 3

Unscored —

CVE-2018-14553

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an app…

libgd2 libgd2 gd doxygen Debian Ubuntu Alpine

Feb 11, 2020
Unscored —

CVE-2019-6977 Public exploit EPSS 71%

gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch func…

php7 libgd2 libgd2 gd Debian Ubuntu Alpine

Jan 27, 2019
Unscored —

CVE-2019-6978

The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, …

libgd2 libgd2 gd Debian Ubuntu Alpine

Jan 28, 2019

Moderate: gd security update (Oracle Linux 8)

Summary

Fixed packages 2

Vulnerabilities 3

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an app…

gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch func…

The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, …