Package name
gd
Date
2007-06-13
Advisory ID
MDKSA-2007:122
Affected versions
CS4.0 x86_64 , 2007.0 x86_64 , 2007.1 i586 , 2007.0 i586 , CS3.0 x86_64 , CS4.0 i586 , CS3.0 i586 , 2007.1 x86_64

Problem description

A flaw in libgd2 was found by Xavier Roche where it would not correctly
validate PNG callback results. If an application linked against
libgd2 was tricked into processing a specially-crafted PNG file, it
could cause a denial of service scenario via CPU resource consumption.

The updated packages have been patched to prevent this issue.

Updated packages

CS4.0 x86_64

 fc5078a497db8094fbf14980a5ee2c76  corporate/4.0/x86_64/gd-utils-2.0.33-3.3.20060mlcs4.x86_64.rpm
 80e1c4bb6338dfb58c246d0a8b001181  corporate/4.0/x86_64/lib64gd2-2.0.33-3.3.20060mlcs4.x86_64.rpm
 e3db3d95d3a1485226ae15d5bb5ea6c5  corporate/4.0/x86_64/lib64gd2-devel-2.0.33-3.3.20060mlcs4.x86_64.rpm
 00a195e5e03a1a5840f95ddd0b42f7db  corporate/4.0/x86_64/lib64gd2-static-devel-2.0.33-3.3.20060mlcs4.x86_64.rpm 
 febc485fc1fed3d030cf440a20f000ef  corporate/4.0/SRPMS/gd-2.0.33-3.3.20060mlcs4.src.rpm

2007.0 x86_64

 6d49b3c840e14ed18363069c12c94672  2007.0/x86_64/gd-utils-2.0.33-5.2mdv2007.0.x86_64.rpm
 4d96a041fa0afcdb46d395c87f545080  2007.0/x86_64/lib64gd2-2.0.33-5.2mdv2007.0.x86_64.rpm
 36921632c56a9972f1d6db49e225e5c7  2007.0/x86_64/lib64gd2-devel-2.0.33-5.2mdv2007.0.x86_64.rpm
 8d1636c72f97ea7e654fdae03cdee7ce  2007.0/x86_64/lib64gd2-static-devel-2.0.33-5.2mdv2007.0.x86_64.rpm 
 7f26e734f247f081c4f91d88c4cf8746  2007.0/SRPMS/gd-2.0.33-5.2mdv2007.0.src.rpm

2007.1 i586

 be767d1fb70fadda41e824b60a40654a  2007.1/i586/gd-utils-2.0.34-1.1mdv2007.1.i586.rpm
 d2f160f37beadd9ba3d5170e8524e2cd  2007.1/i586/libgd2-2.0.34-1.1mdv2007.1.i586.rpm
 364b5cf24157faf590f19f039f67c041  2007.1/i586/libgd2-devel-2.0.34-1.1mdv2007.1.i586.rpm
 e87568c973cfae2c65326c95a23841d2  2007.1/i586/libgd2-static-devel-2.0.34-1.1mdv2007.1.i586.rpm 
 03c9eadb6bdb8ada82180da39b745100  2007.1/SRPMS/gd-2.0.34-1.1mdv2007.1.src.rpm

2007.0 i586

 4553247ff29b71630a511cfa2e8f8dae  2007.0/i586/gd-utils-2.0.33-5.2mdv2007.0.i586.rpm
 e597fdc7e70f9d47fba809c068d01c73  2007.0/i586/libgd2-2.0.33-5.2mdv2007.0.i586.rpm
 5cb1c7417540c8bf923329a1b913e8af  2007.0/i586/libgd2-devel-2.0.33-5.2mdv2007.0.i586.rpm
 41c08511d622f73c2941cd6153283a9d  2007.0/i586/libgd2-static-devel-2.0.33-5.2mdv2007.0.i586.rpm 
 7f26e734f247f081c4f91d88c4cf8746  2007.0/SRPMS/gd-2.0.33-5.2mdv2007.0.src.rpm

CS3.0 x86_64

 beb3b4d6b05b3bf5d5f26be43b166dc0  corporate/3.0/x86_64/gd-utils-2.0.15-4.4.C30mdk.x86_64.rpm
 6f24793bb256074012c76cc678caf17f  corporate/3.0/x86_64/lib64gd2-2.0.15-4.4.C30mdk.x86_64.rpm
 d2d43fc0411bbcbdb1c5cd81b5c730fe  corporate/3.0/x86_64/lib64gd2-devel-2.0.15-4.4.C30mdk.x86_64.rpm
 78891b53940ad4d50010f3a5d8a9eb74  corporate/3.0/x86_64/lib64gd2-static-devel-2.0.15-4.4.C30mdk.x86_64.rpm 
 19787484527e346d55c74459abcbe878  corporate/3.0/SRPMS/gd-2.0.15-4.4.C30mdk.src.rpm

CS4.0 i586

 74461c4ac716814c86060d9418f6cf54  corporate/4.0/i586/gd-utils-2.0.33-3.3.20060mlcs4.i586.rpm
 2c6101e648d090bfde2a6038042a56ae  corporate/4.0/i586/libgd2-2.0.33-3.3.20060mlcs4.i586.rpm
 3beb7a4c7bb978442d3098f852f3e3fc  corporate/4.0/i586/libgd2-devel-2.0.33-3.3.20060mlcs4.i586.rpm
 ef4fb906adf0a9d40fab025ca9cf20d4  corporate/4.0/i586/libgd2-static-devel-2.0.33-3.3.20060mlcs4.i586.rpm 
 febc485fc1fed3d030cf440a20f000ef  corporate/4.0/SRPMS/gd-2.0.33-3.3.20060mlcs4.src.rpm

CS3.0 i586

 77415362e06982bdf984f378ac768bd1  corporate/3.0/i586/gd-utils-2.0.15-4.4.C30mdk.i586.rpm
 28e9d357648fc4367b8ae481a4ef46f0  corporate/3.0/i586/libgd2-2.0.15-4.4.C30mdk.i586.rpm
 ebcac1bb4ac277b8813d2b9f2d4e6ec9  corporate/3.0/i586/libgd2-devel-2.0.15-4.4.C30mdk.i586.rpm
 77376cc5884c131906c6977cb9c52e76  corporate/3.0/i586/libgd2-static-devel-2.0.15-4.4.C30mdk.i586.rpm 
 19787484527e346d55c74459abcbe878  corporate/3.0/SRPMS/gd-2.0.15-4.4.C30mdk.src.rpm

2007.1 x86_64

 39ec275e8946123b78e01671a31ee128  2007.1/x86_64/gd-utils-2.0.34-1.1mdv2007.1.x86_64.rpm
 17d51791166f4a15f4cf8fee41852b04  2007.1/x86_64/lib64gd2-2.0.34-1.1mdv2007.1.x86_64.rpm
 74195a52b4b4d3de151b720809492aa8  2007.1/x86_64/lib64gd2-devel-2.0.34-1.1mdv2007.1.x86_64.rpm
 058ad0e0a91a0d069539b7c235f883a0  2007.1/x86_64/lib64gd2-static-devel-2.0.34-1.1mdv2007.1.x86_64.rpm 
 03c9eadb6bdb8ada82180da39b745100  2007.1/SRPMS/gd-2.0.34-1.1mdv2007.1.src.rpm

References