Описание
Security update for gd
This update for gd fixes one issues.
This security issue was fixed:
- CVE-2017-6362: Prevent double-free in gdImagePngPtr() that potentially allowed for DoS or remote code execution (bsc#1056993).
This update was imported from the SUSE:SLE-12:Update update project.
Список пакетов
openSUSE Leap 42.2
gd-2.1.0-21.1
gd-32bit-2.1.0-21.1
gd-devel-2.1.0-21.1
openSUSE Leap 42.3
gd-2.1.0-21.1
gd-32bit-2.1.0-21.1
gd-devel-2.1.0-21.1
Ссылки
- E-Mail link for openSUSE-SU-2018:0151-1
- SUSE Security Ratings
Описание
Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors.
Затронутые продукты
openSUSE Leap 42.2:gd-2.1.0-21.1
openSUSE Leap 42.2:gd-32bit-2.1.0-21.1
openSUSE Leap 42.2:gd-devel-2.1.0-21.1
openSUSE Leap 42.3:gd-2.1.0-21.1
Ссылки
- CVE-2017-6362
- SUSE Bug 1056993