SUSE-SU-2017:0459-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2017:0459-1

Related

Published

2017-02-14T13:08:25Z

Modified

2017-02-14T13:08:25Z

Summary

Security update for gd

Details

This update for gd fixes the following security issues:

CVE-2016-9317: The gdImageCreate function in the GD Graphics Library (aka libgd) allowed remote attackers to cause a denial of service (system hang) via an oversized image. (bsc#1022283)
CVE-2016-10167: A denial of service problem in gdImageCreateFromGd2Ctx() could lead to libgd running out of memory even on small files. (bsc#1022264)
CVE-2016-10168: A signed integer overflow in the GD Graphics Library (aka libgd) could lead to memory corruption (bsc#1022265)

References

Affected packages

Name: gd
Purl: purl:rpm/suse/gd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.36.RC1-52.32.1

{
    "binaries": [
        {
            "gd-devel": "2.0.36.RC1-52.32.1"
        }
    ]
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.36.RC1-52.32.1

{
    "binaries": [
        {
            "gd": "2.0.36.RC1-52.32.1"
        }
    ]
}

Name: gd
Purl: purl:rpm/suse/gd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.36.RC1-52.32.1

{
    "binaries": [
        {
            "gd": "2.0.36.RC1-52.32.1"
        }
    ]
}