CVE-2019-6978

The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected.

The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected.

The libwmf packages provide a library for reading and converting Windows Metafile Format (WMF) vector graphics. The library is used by applications such as GIMP and ImageMagick.

Security Fix(es):

• gd: double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats.

Security Fix(es):

• gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c (CVE-2019-6977)

• gd: NULL pointer dereference in gdImageClone (CVE-2018-14553)

• gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected.

The libwmf packages provide a library for reading and converting Windows Metafile Format (WMF) vector graphics. The library is used by applications such as GIMP and ImageMagick.

Security Fix(es):

• gd: double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats.

Security Fix(es):

• gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c (CVE-2019-6977)

• gd: NULL pointer dereference in gdImageClone (CVE-2018-14553)

• gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5 has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger calls to the function with crafted image data (CVE-2019-6977).

The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978).

The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected. (CVE-2019-6978)

This update for gd fixes the following issues:

Security issues fixed:

• CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function (bsc#1123361).
• CVE-2019-6978: Fixed a double free in the gdImage*Ptr() functions (bsc#1123522).

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the gd-2.3.3-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libwmf-0_2-7-0.2.12-2.3 package on the GA media of openSUSE Tumbleweed.

This update for php7 fixes the following issues:

Security issue fixed:

• CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function (bsc#1123354).
• CVE-2019-6978: Fixed a double free in the gdImage*Ptr() functions (bsc#1123522).
• CVE-2018-19935: Fixed a Denial of Service in php_imap.c which could be triggered via an empty string in the message argument to imap_mail (bsc#1118832).

This update for gd fixes the following issues:

Security issues fixed:

• CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function (bsc#1123361).
• CVE-2019-6978: Fixed a double free in the gdImage*Ptr() functions (bsc#1123522).

This update for gd fixes the following issues:

Security issues fixed:

• CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function (bsc#1123361).
• CVE-2019-6978: Fixed a double free in the gdImage*Ptr() functions (bsc#1123522).

This update for php53 fixes the following issues:

Security issues fixed:

• CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function (bsc#1123354).
• CVE-2019-6978: Fixed a double free in the gdImage*Ptr() functions (bsc#1123522).

This update for libwmf fixes the following issues:

libwmf was updated to 0.2.12:

• upstream changed to fork from Fedora: https://github.com/caolanm/libwmf

• merged all the pending fixes

• merge in fixes for libgd CVE-2019-6978 (bsc#1123522)

• fixed memory allocation failure (CVE-2016-9011)

• Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)

This update for libwmf fixes the following issues:

libwmf was updated to 0.2.12:

• upstream changed to fork from Fedora: https://github.com/caolanm/libwmf

• merged all the pending fixes

• merge in fixes for libgd CVE-2019-6978 (bsc#1123522)

• fixed memory allocation failure (CVE-2016-9011)

• Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)

It was discovered that GD incorrectly handled memory when processing certain images. A remote attacker could use this issue with a specially crafted image file to cause GD to crash, resulting in a denial of service, or possibly execute arbitrary code.