Ubuntu 6592 Published by

New GD Graphics Library packages have been released for Ubuntu Linux versions 16.04 LTS, 18.04 LTS, 20.04 LTS, and 22.04 LTS:

[USN-7112-1] GD Graphics Library vulnerability




[USN-7112-1] GD Graphics Library vulnerability


==========================================================================
Ubuntu Security Notice USN-7112-1
November 15, 2024

libgd2 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- - Ubuntu 22.04 LTS
- - Ubuntu 20.04 LTS
- - Ubuntu 18.04 LTS
- - Ubuntu 16.04 LTS

Summary:

GD Graphics Library could be made to crash if it opened a specially
crafted file.

Software Description:
- - libgd2: GD Graphics Library

Details:

It was discovered that the GD Graphics Library did not perform proper
bounds checking while handling BMP and WebP files. If a user were tricked
into opening a specially crafted file, an attacker could possibly use
this issue to cause a denial of service (application crash).

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
libgd-dev 2.3.0-2ubuntu2.3
libgd-tools 2.3.0-2ubuntu2.3
libgd3 2.3.0-2ubuntu2.3

Ubuntu 20.04 LTS
libgd-dev 2.2.5-5.2ubuntu2.4
libgd-tools 2.2.5-5.2ubuntu2.4
libgd3 2.2.5-5.2ubuntu2.4

Ubuntu 18.04 LTS
libgd-dev 2.2.5-4ubuntu0.5+esm3
Available with Ubuntu Pro
libgd-tools 2.2.5-4ubuntu0.5+esm3
Available with Ubuntu Pro
libgd3 2.2.5-4ubuntu0.5+esm3
Available with Ubuntu Pro

Ubuntu 16.04 LTS
libgd-dev 2.1.1-4ubuntu0.16.04.12+esm4
Available with Ubuntu Pro
libgd-tools 2.1.1-4ubuntu0.16.04.12+esm4
Available with Ubuntu Pro
libgd3 2.1.1-4ubuntu0.16.04.12+esm4
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-7112-1
CVE-2021-40812

Package Information:
https://launchpad.net/ubuntu/+source/libgd2/2.3.0-2ubuntu2.3
https://launchpad.net/ubuntu/+source/libgd2/2.2.5-5.2ubuntu2.4