iQEzBAEBCAAdFiEElnO/d49FoUPK9fwytGdj0GOh2+wFAl6Ga0cACgkQtGdj0GOh
2+xBFQf/cS6gRYL3pKQexBEKvbfXpF7/e2m5gBToHBtCVopgVU+Dgmv+ECXlcYET
4bk8exGZRLfOXQzrxKhBY44F5tyooD6GPivuyHxdbIdOo+9BC2UriYIzNHoixYCx
Xx96vJmSsPy0GlBJsiXj6v+AqvCCxqSesZtwmCbAwzYfkafs4Kt98GU6/B8EBUF2
O+MqYBwuQB+a2MSYlHyCo1+d3UNYzRAuGgl7P3A8Jc+tocCbpAVoA/9B1uc1CuFH
pUmFPecuG51jbdY2COVE45QXDlN1h/Ti2TlYW9yOVgYcIDBhqjrFgzMzyvHlnnTb
O9RL+k4RTxe9PkMWRHYHGTWxoy7Htw==
=yz2+
-----END PGP SIGNATURE-----
==============================
Ubuntu Security Notice USN-4316-1
April 02, 2020
libgd2 vulnerabilities
==============================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 19.10
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
Several security issues were fixed in GD Graphics Library.
Software Description:
- libgd2: Open source code library for the dynamic creation of images
Details:
It was discovered that GD Graphics Library incorrectly handled cloning an
image. An attacker could possibly use this issue to cause GD Graphics Library
to crash, resulting in a denial of service. (CVE-2018-14553)
It was discovered that GD Graphics Library incorrectly handled loading images
from X bitmap format files. An attacker could possibly use this issue to cause
GD Graphics Library to crash, resulting in a denial of service, or to disclose
contents of the stack that has been left there by previous code. This issue
only affected Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. (CVE-2019-11038)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 19.10:
libgd-tools 2.2.5-5.2ubuntu0.19.10.1
libgd3 2.2.5-5.2ubuntu0.19.10.1
Ubuntu 18.04 LTS:
libgd-tools 2.2.5-4ubuntu0.4
libgd3 2.2.5-4ubuntu0.4
Ubuntu 16.04 LTS:
libgd-tools 2.1.1-4ubuntu0.16.04.12
libgd3 2.1.1-4ubuntu0.16.04.12
In general, a standard system update will make all the necessary changes.
References:
No comments:
Post a Comment