Red Hat Security AdvisoryRHSA-2020:4659
gd security update
Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) gd-2.2.5-7.el8, gd-devel-2.2.5-7.el8
Fixes 3 records
Priority HIGH 76
gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.71496 · Published 2019-01-27 · Partial fix CWE-787
Priority MEDIUM 49
The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04452 · Published 2019-01-28 · Partial fix CWE-415
Priority LOW 39
gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03435 · Published 2020-02-11 · Fixed CWE-476
