[ubuntu/focal-security] libgd2 2.2.5-5.2ubuntu1 (Accepted)

Thu Apr 2 20:39:03 UTC 2020

libgd2 (2.2.5-5.2ubuntu1) focal; urgency=medium

  * SECURITY UPDATE: NULL pointer dereference in gdImageClone allows attackers
    to crash an application via a specific function call sequence
    - debian/patches/CVE-2018-14553.patch: remove manual style copy from
      src/gd.c and appropriately set stylePos in tests/gdimageclone/style.c.
    - CVE-2018-14553

Date: 2020-03-31 22:40:16.036202+00:00
Changed-By: Avital Ostromich <avital.ostromich at canonical.com>
https://launchpad.net/ubuntu/+source/libgd2/2.2.5-5.2ubuntu1
-------------- next part --------------
Sorry, changesfile not available.