shield Security update for gd

SUSE-SLE-SERVER-12-SP1-2016-1347

This update for gd fixes the following issues: * CVE-2016-6214: Buffer over-read issue when parsing crafted TGA file [bsc#991436] * CVE-2016-6132: read out-of-bands was found in the parsing of TGA files using libgd [bsc#987577] * CVE-2016-6128: Invalid color index not properly handled [bsc#991710] * CVE-2016-6207: Integer overflow error within _gdContributionsAlloc() [bsc#991622] * CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif [bsc#988032] * CVE-2016-5116: avoid stack overflow (read) with large names [bsc#982176] * CVE-2016-6905: Out-of-bounds read in function read_image_tga in gd_tga.c [bsc#995034]

• Release Date
  Sep 14 2016
• References
  Bugzilla: 991436, 991622, 988032, 987577, 991710, 982176, 995034
  CVEs: CVE-2016-6128, CVE-2016-6161, CVE-2016-6214, CVE-2016-6132, CVE-2016-5116, CVE-2016-6207, CVE-2016-6905
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.1 s390x

• Packages
  gd
  A Drawing Library for Programs That Use PNG and JPEG Output

  2.1.0-12.1 lock rpm lock src

SUSE Linux Enterprise Server 12.1 ppc64le

• Packages
  gd
  A Drawing Library for Programs That Use PNG and JPEG Output

  2.1.0-12.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 12.1 x86_64

• Packages
  gd
  A Drawing Library for Programs That Use PNG and JPEG Output

  2.1.0-12.1 lock rpm lock src