SUSE Package Hub - SUSE-SLE-Module-Packagehub-Subpackages-15-SP1-2020-594

Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP1-2020-594

Security update for gd

Type: security

Severity: moderate

Issued: 2020-07-07

Description:

This update for gd fixes the following issues:

Security issue fixed:

- CVE-2018-14553: Fixed a null pointer dereference in gdImageClone (bsc#1165471).
- CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm() (bsc#1140120).

References

CVE: CVE-2019-11038
CVE: CVE-2018-14553
Bugzilla: 1165471 VUL-1: CVE-2018-14553: gd: null pointer dereference in gdImageClone()
Bugzilla: 1140120 VUL-0: CVE-2019-11038: gd: information disclosure in function gdImageCreateFromXbm()

Packages

gd-2.2.5-4.14.1