Stay Secure with the Latest Linux Advisories

security advisoryDoSUbuntu

Ubuntu 3900-1: Critical GD Image Processing Issue and DoS Threat

Several security issues were fixed in GD.. =========================================================================Ubuntu Security Notice USN-3900-1 February 28, 2019 libgd2 vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in GD. Software Description: - libgd2: GD Graphics Library Details: It was discovered that GD incorrectly handled memory when processing certain images. A remote attacker could use this issue with a specially crafted image file to cause GD to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10: libgd-tools 2.2.5-4ubuntu1.1 libgd3 2.2.5-4ubuntu1.1 Ubuntu 18.04 LTS: libgd-tools 2.2.5-4ubuntu0.3 libgd3 2.2.5-4ubuntu0.3 Ubuntu 16.04 LTS: libgd-tools 2.1.1-4ubuntu0.16.04.11 libgd3 2.1.1-4ubuntu0.16.04.11 Ubuntu 14.04 LTS: libgd-tools 2.1.0-3ubuntu0.11 libgd3 2.1.0-3ubuntu0.11 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3900-1 CVE-2019-6977, CVE-2019-6978 Package Information: https://launchpad.net/ubuntu/+source/libgd2/2.2.5-4ubuntu1.1 https://launchpad.net/ubuntu/+source/libgd2/2.2.5-4ubuntu0.3 https://launchpad.net/ubuntu/+source/libgd2/2.1.1-4ubuntu0.16.04.11 https://launchpad.net/ubuntu/+source/libgd2/2.1.0-3ubuntu0.11 . =========================================================================Ubuntu Security Notice USN-. security,==========================================================. . Severity: Critical. LinuxSecurity.com Team

Feb 28, 2019 •Critical Ubuntu