==========================================================================
Ubuntu Security Notice USN-3410-1
September 05, 2017

libgd2 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 17.04
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS

Summary:

GD library could be made to crash if it opened a specially crafted
file.

Software Description:
– libgd2: GD Graphics Library

Details:

It was discovered a double-free vulnerability in GD library.
A remote attacker could write arbitrary values in memory
spaces or made programs to crash.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  libgd-tools                     2.2.4-2ubuntu0.3
  libgd3                          2.2.4-2ubuntu0.3

Ubuntu 16.04 LTS:
  libgd-tools                     2.1.1-4ubuntu0.16.04.8
  libgd3                          2.1.1-4ubuntu0.16.04.8

Ubuntu 14.04 LTS:
  libgd-tools                     2.1.0-3ubuntu0.8
  libgd3                          2.1.0-3ubuntu0.8

In general, a standard system update will make all the necessary
changes.

References:
  https://www.ubuntu.com/usn/usn-3410-1
  CVE-2017-6362

Package Information:
  https://launchpad.net/ubuntu/+source/libgd2/2.2.4-2ubuntu0.3
  https://launchpad.net/ubuntu/+source/libgd2/2.1.1-4ubuntu0.16.04.8
  https://launchpad.net/ubuntu/+source/libgd2/2.1.0-3ubuntu0.8
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=1Xsn
—–END PGP SIGNATURE—–
—
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

==========================================================================
Ubuntu Security Notice USN-3410-2
September 05, 2017

libgd2 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 12.04 ESM

Summary:

GD library could be made to crash if it opened a specially crafted
file.

Software Description:
– libgd2: GD Graphics Library

Details:

USN-3410-1 fixed a vulnerability in GD Graphics Library.
This update provides the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

 It was discovered that the GD Graphics Library (aka libgd) incorrectly
 handled certain malformed PNG images. A remote attacker could use this
 issue to cause the GD Graphics Library to crash, resulting in a denial
 of service, or possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  libgd-tools                     2.0.36~rc1~dfsg-6ubuntu2.6
  libgd2-noxpm                    2.0.36~rc1~dfsg-6ubuntu2.6
  libgd2-xpm                      2.0.36~rc1~dfsg-6ubuntu2.6

In general, a standard system update will make all the necessary
changes.

References:
  https://www.ubuntu.com/usn/usn-3410-2
  https://www.ubuntu.com/usn/usn-3410-1
  CVE-2017-6362
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=zLMx
—–END PGP SIGNATURE—–
—