Multiple vulnerabilities have been found in GD, the worst of which could result in the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/gd | * | < 2.2.5-r2 | >= 2.2.5-r2 |
GD is a graphic library for fast image creation.
Multiple vulnerabilities have been discovered in GD. Please review the CVE identifiers referenced below for details.
A remote attacker could entice a user to process a specially crafted image, possibly resulting in execution of arbitrary code or a Denial of Service condition.
There is no known workaround at this time.
All GD users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/gd-2.2.5-r2"
Multiple vulnerabilities have been found in GD, the worst of which allows remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/gd | * | < 2.2.3 | >= 2.2.3 |
GD is a graphic library for fast image creation.
Multiple vulnerabilities have been discovered in GD. Please review the CVE identifiers referenced below for details.
A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.
There is no known workaround at this time.
All gd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/gd-2.2.3"
Multiple vulnerabilities have been found in GD, the worst of which allows remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/gd | * | < 2.2.2 | >= 2.2.2 |
GD is a graphic library for fast image creation.
Multiple vulnerabilities have been discovered in GD. Please review the CVE identifiers referenced below for details.
A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.
There is no known workaround at this time.
All GD users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/gd-2.2.2"
The GD library is prone to a buffer overflow vulnerability.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/gd | * | < 2.0.35-r1 | >= 2.0.35-r1 |
GD is a graphic library for fast image creation.
Tomas Hoger reported that the _gdGetColors() function in gd_gd.c does not properly verify the colorsTotal struct member, possibly leading to a buffer overflow.
A remote attacker could entice a user to open a specially crafted image file with a program using the GD library, possibly resulting in the remote execution of arbitrary code with the privileges of the user running the application, or a Denial of Service condition.
There is no known workaround at this time.
All GD users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/gd-2.0.35-r1"
NOTE: This is a legacy GLSA. Updates for all affected architectures are available since November 21, 2009. It is likely that your system is already no longer affected by this issue.
Multiple vulnerabilities have been discovered in GD, allowing for the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/gd | * | < 2.0.35 | >= 2.0.35 |
GD is a graphic library for fast image creation.
Xavier Roche discovered an infinite loop in the gdPngReadData() function when processing a truncated PNG file (CVE-2007-2756). An integer overflow has been discovered in the gdImageCreateTrueColor() function (CVE-2007-3472). An error has been discovered in the function gdImageCreateXbm() function (CVE-2007-3473). Unspecified vulnerabilities have been discovered in the GIF reader (CVE-2007-3474). An error has been discovered when processing a GIF image that has no global color map (CVE-2007-3475). An array index error has been discovered in the file gd_gif_in.c when processing images with an invalid color index (CVE-2007-3476). An error has been discovered in the imagearc() and imagefilledarc() functions when processing overly large angle values (CVE-2007-3477). A race condition has been discovered in the gdImageStringFTEx() function (CVE-2007-3478).
A remote attacker could exploit one of these vulnerabilities to cause a Denial of Service or possibly execute arbitrary code with the privileges of the user running GD.
There is no known workaround at this time.
All GD users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/gd-2.0.35"
The PNG image decoding routines in the GD library contain an integer overflow that may allow execution of arbitrary code with the rights of the program decoding a malicious PNG image.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/gd | * | < 2.0.32 | >= 2.0.32 |
The GD graphics library is an open source library which allows programmers to easily generate PNG, JPEG, GIF and WBMP images from many different programming languages.
infamous41md found an integer overflow in the memory allocation procedure of the GD routine that handles loading PNG image files.
A remote attacker could entice a user to load a carefully crafted PNG image file in a GD-powered application, or send a PNG image to a web application which uses GD PNG decoding functions. This could potentially lead to execution of arbitrary code with the rights of the program loading the image.
There is no known workaround at this time.
All GD users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/gd-2.0.32"