Red Hat Security Advisory: gd security update

Fixed packages 5

Vulnerabilities 3

• Unscored —
  CVE-2018-14553

  gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an app…

  libgd2 libgd2 gd doxygen Debian Ubuntu Alpine
  Feb 11, 2020
• Unscored —
  CVE-2019-6977 Public exploit EPSS 71%

  gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch func…

  php7 libgd2 libgd2 gd Debian Ubuntu Alpine
  Jan 27, 2019
• Unscored —
  CVE-2019-6978

  The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, …

  libgd2 libgd2 gd Debian Ubuntu Alpine
  Jan 28, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1600727
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1671390
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1672207
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4659.json
• report
  https://access.redhat.com/security/cve/CVE-2018-14553
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-14553
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-14553
• report
  https://access.redhat.com/security/cve/CVE-2019-6977
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-6977
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-6977
• report
  https://access.redhat.com/security/cve/CVE-2019-6978
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-6978
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-6978