Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:3214-1

Опубликовано: 23 сент. 2021
Источник: suse-cvrf

Описание

Security update for gd

This update for gd fixes the following issues:

  • CVE-2021-40812: Fixed out-of-bounds read caused by the lack of certain gdGetBuf and gdPutBuf return value checks (bsc#1190400).

Список пакетов

Image SLES12-SP4-SAP-Azure
gd-2.1.0-24.20.1
Image SLES12-SP4-SAP-Azure-BYOS
gd-2.1.0-24.20.1
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production
gd-2.1.0-24.20.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production
gd-2.1.0-24.20.1
Image SLES12-SP4-SAP-EC2-HVM
gd-2.1.0-24.20.1
Image SLES12-SP4-SAP-EC2-HVM-BYOS
gd-2.1.0-24.20.1
Image SLES12-SP4-SAP-GCE
gd-2.1.0-24.20.1
Image SLES12-SP4-SAP-GCE-BYOS
gd-2.1.0-24.20.1
Image SLES12-SP5-Azure-SAP-BYOS
gd-2.1.0-24.20.1
Image SLES12-SP5-Azure-SAP-On-Demand
gd-2.1.0-24.20.1
Image SLES12-SP5-EC2-SAP-BYOS
gd-2.1.0-24.20.1
Image SLES12-SP5-EC2-SAP-On-Demand
gd-2.1.0-24.20.1
Image SLES12-SP5-GCE-SAP-BYOS
gd-2.1.0-24.20.1
Image SLES12-SP5-GCE-SAP-On-Demand
gd-2.1.0-24.20.1
Image SLES12-SP5-OCI-BYOS-SAP-BYOS
gd-2.1.0-24.20.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
gd-2.1.0-24.20.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
gd-2.1.0-24.20.1
SUSE Linux Enterprise Server 12 SP5
gd-2.1.0-24.20.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
gd-2.1.0-24.20.1
SUSE Linux Enterprise Software Development Kit 12 SP5
gd-devel-2.1.0-24.20.1
SUSE Linux Enterprise Workstation Extension 12 SP5
gd-32bit-2.1.0-24.20.1

Ссылки

Описание

The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.

Затронутые продукты
Image SLES12-SP4-SAP-Azure-BYOS:gd-2.1.0-24.20.1
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gd-2.1.0-24.20.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gd-2.1.0-24.20.1
Image SLES12-SP4-SAP-Azure:gd-2.1.0-24.20.1
Ссылки