Publishing details
Changelog
libgd2 (2.2.5-5.2ubuntu2.1) focal-security; urgency=medium
* SECURITY UPDATE: Heap-based buffer over-read
- debian/patches/CVE-2017-6363-*.patch: make sure transparent
palette index is within bounds in src/gd_gd.c and add tests in
tests/gd/bug00383.c, tests/gd/CMakeLists.txt, tests/gd/Makemodule.am,
tests/gd2/bug00383.c, tests/gd2/CMakeLists.txt, test/gd2/Makemodule.am.
- CVE-2017-6363
* SECURITY UPDATE: Out-of-bounds read
- debian/patches/CVE-2021-38115.patch: fix a read out-of-bounds in
reading tga header file in src/gd_tga.c.
- CVE-2021-38115
* SECURITY UPDATE: Double free
- debian/patches/CVE-2021-40145.patch: fix a memory leak in
src/gd_gd2.c.
- CVE-2021-40145
-- Leonidas Da Silva Barbosa <email address hidden> Mon, 30 Aug 2021 15:10:22 -0300
Builds
Built packages
-
libgd-dev
GD Graphics Library (development version)
-
libgd-tools
GD command line tools and example code
-
libgd-tools-dbgsym
debug symbols for libgd-tools
-
libgd3
GD Graphics Library
-
libgd3-dbgsym
debug symbols for libgd3
Package files