Red Hat Security AdvisoryRHSA-2020:5443
gd security update
Released 2020-12-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) gd-2.0.35-27.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) gd-devel-2.0.35-27.el7_9, gd-progs-2.0.35-27.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) gd-devel-2.0.35-27.el7_9, gd-progs-2.0.35-27.el7_9
- Red Hat Enterprise Linux Server (v. 7) gd-2.0.35-27.el7_9, gd-2.0.35-27.el7_9.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) gd-devel-2.0.35-27.el7_9, gd-devel-2.0.35-27.el7_9.ppc, gd-progs-2.0.35-27.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) gd-2.0.35-27.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) gd-devel-2.0.35-27.el7_9, gd-progs-2.0.35-27.el7_9
Fixes 1 record
Priority MEDIUM 48
Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.07495 · Published 2016-08-07 · Partial fix CWE-190
