USN-3410-2: GD library vulnerability
05 September 2017
GD library could be made to crash if it opened a specially crafted file.
Releases
Packages
- libgd2 - GD Graphics Library
Details
USN-3410-1 fixed a vulnerability in GD Graphics Library.
This update provides the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:
It was discovered that the GD Graphics Library (aka libgd) incorrectly handled
certain malformed PNG images. A remote attacker could use this issue to cause
the GD Graphics Library to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 12.04
-
libgd2-xpm
-
2.0.36~rc1~dfsg-6ubuntu2.6
-
libgd2-noxpm
-
2.0.36~rc1~dfsg-6ubuntu2.6
-
libgd-tools
-
2.0.36~rc1~dfsg-6ubuntu2.6
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-3410-1: libgd3, libgd-tools, libgd2