libgd2 2.2.5-5.2ubuntu2.1 source package in Ubuntu

Changelog

libgd2 (2.2.5-5.2ubuntu2.1) focal-security; urgency=medium

  * SECURITY UPDATE: Heap-based buffer over-read
    - debian/patches/CVE-2017-6363-*.patch: make sure transparent
      palette index is within bounds in src/gd_gd.c and add tests in
      tests/gd/bug00383.c, tests/gd/CMakeLists.txt, tests/gd/Makemodule.am,
      tests/gd2/bug00383.c, tests/gd2/CMakeLists.txt, test/gd2/Makemodule.am.
    - CVE-2017-6363
  * SECURITY UPDATE: Out-of-bounds read
    - debian/patches/CVE-2021-38115.patch: fix a read out-of-bounds in
      reading tga header file in src/gd_tga.c.
    - CVE-2021-38115
  * SECURITY UPDATE: Double free
    - debian/patches/CVE-2021-40145.patch: fix a memory leak in
      src/gd_gd2.c.
    - CVE-2021-40145

 -- Leonidas Da Silva Barbosa <email address hidden>  Mon, 30 Aug 2021 15:10:22 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
graphics
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates main oldlibs
Focal security main oldlibs

Downloads

File Size SHA-256 Checksum
libgd2_2.2.5.orig.tar.gz 3.2 MiB 150e6952af874bbccb33cf0f87288b41a8fd54f0ce4cff914ef90a80ef9d0162
libgd2_2.2.5-5.2ubuntu2.1.debian.tar.xz 37.5 KiB b2895c9f7f896507c9e0be38e8022f830a97d2778c54e9d3df5cb23aaa014c75
libgd2_2.2.5-5.2ubuntu2.1.dsc 2.3 KiB 51a357020e63adc3624989a1ad8c1919855b3f7b62ce9b3bce6b9a3ece974e3e

View changes file

Binary packages built by this source

libgd-dev: GD Graphics Library (development version)

 GD is a graphics library. It allows your code to quickly draw images
 complete with lines, arcs, text, multiple colours, cut and paste from
 other images, flood fills, and write out the result as a PNG file.
 This is particularly useful in World Wide Web applications, where PNG is
 one of the formats accepted for inline images by most browsers.
 .
 This is the full development version of the library.

libgd-tools: GD command line tools and example code

 GD is a graphics library. It allows your code to quickly draw images
 complete with lines, arcs, text, multiple colours, cut and paste from
 other images, flood fills, and write out the result as a PNG file.
 This is particularly useful in World Wide Web applications, where PNG is
 one of the formats accepted for inline images by most browsers.
 .
 This is some simple command line tools and example code that use the GD
 graphics library.

libgd-tools-dbgsym: debug symbols for libgd-tools
libgd3: GD Graphics Library

 GD is a graphics library. It allows your code to quickly draw images
 complete with lines, arcs, text, multiple colours, cut and paste from
 other images, flood fills, and write out the result as a PNG file.
 This is particularly useful in World Wide Web applications, where PNG is
 one of the formats accepted for inline images by most browsers.
 .
 This is the runtime package of the library.

libgd3-dbgsym: debug symbols for libgd3