Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 557
Alerts This Week
Warning Icon 1 557

Ubuntu 17.04 LTS: USN-3410-1 Critical: GD Library Crash Risk

ubuntu
Calendar Grey September 5, 2017
Dist Ubuntu Esm H88
A vulnerability in the GD library for Ubuntu may lead to application crashes when specific files are accessed. Ensure your system is updated to secure against this issue.
GD library could be made to crash if it opened a specially craftedfile.

Summary

GD library could be made to crash if it opened a specially crafted

file.

Software Description:

- libgd2: GD Graphics Library

Details:

It was discovered a double-free vulnerability in GD library.

A remote attacker could write arbitrary values in memory

spaces or made programs to crash.

Topics%20covered

Topics Covered

security advisory software update remote attack Ubuntu double-free libgd2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  libgd-tools                     2.2.4-2ubuntu0.3
  libgd3                          2.2.4-2ubuntu0.3

Ubuntu 16.04 LTS:
  libgd-tools                     2.1.1-4ubuntu0.16.04.8
  libgd3                          2.1.1-4ubuntu0.16.04.8

Ubuntu 14.04 LTS:
  libgd-tools                     2.1.0-3ubuntu0.8
  libgd3                          2.1.0-3ubuntu0.8

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3410-1

  CVE-2017-6362

Severity
critical
Lowest
Low
Medium
High
Critical

September 05, 2017

Topics%20covered

Topics Covered

security advisory software update remote attack Ubuntu double-free libgd2

Package Information

  https://launchpad.net/ubuntu/+source/libgd2/2.2.4-2ubuntu0.3
  https://launchpad.net/ubuntu/+source/libgd2/2.1.1-4ubuntu0.16.04.8
  https://launchpad.net/ubuntu/+source/libgd2/2.1.0-3ubuntu0.8

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.