Описание
Security update for gd
This update for gd fixes one issues.
This security issue was fixed:
- CVE-2017-6362: Prevent double-free in gdImagePngPtr() that potentially allowed for DoS or remote code execution (bsc#1056993).
Список пакетов
SUSE Linux Enterprise Desktop 12 SP2
gd-2.1.0-24.3.4
gd-32bit-2.1.0-24.3.4
SUSE Linux Enterprise Desktop 12 SP3
gd-2.1.0-24.3.4
gd-32bit-2.1.0-24.3.4
SUSE Linux Enterprise Server 12 SP2
gd-2.1.0-24.3.4
SUSE Linux Enterprise Server 12 SP3
gd-2.1.0-24.3.4
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
gd-2.1.0-24.3.4
SUSE Linux Enterprise Server for SAP Applications 12 SP2
gd-2.1.0-24.3.4
SUSE Linux Enterprise Server for SAP Applications 12 SP3
gd-2.1.0-24.3.4
SUSE Linux Enterprise Software Development Kit 12 SP2
gd-devel-2.1.0-24.3.4
SUSE Linux Enterprise Software Development Kit 12 SP3
gd-devel-2.1.0-24.3.4
SUSE Linux Enterprise Workstation Extension 12 SP2
gd-32bit-2.1.0-24.3.4
SUSE Linux Enterprise Workstation Extension 12 SP3
gd-32bit-2.1.0-24.3.4
Ссылки
- Link for SUSE-SU-2018:0135-1
- E-Mail link for SUSE-SU-2018:0135-1
- SUSE Security Ratings
- SUSE Bug 1056993
- SUSE CVE CVE-2017-6362 page
Описание
Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:gd-2.1.0-24.3.4
SUSE Linux Enterprise Desktop 12 SP2:gd-32bit-2.1.0-24.3.4
SUSE Linux Enterprise Desktop 12 SP3:gd-2.1.0-24.3.4
SUSE Linux Enterprise Desktop 12 SP3:gd-32bit-2.1.0-24.3.4
Ссылки
- CVE-2017-6362
- SUSE Bug 1056993