Ubuntu update for libgd2

Secunia ID

SA37264

CVE-ID

CVE-2007-3475, CVE-2007-3476, CVE-2007-3477, CVE-2009-3293, CVE-2009-3546

Release Date

06 Nov 2009

Criticality

Moderately Critical

Solution Status

Vendor Patch

Where

From remote

Impact

DoS (Denial of Service)

This includes vulnerabilities ranging from excessive resource consumption (e.g. causing a system to use a lot of memory) to crashing an application or an entire system.

System access

This covers vulnerabilities where malicious people are able to gain system access and execute arbitrary code with the privileges of a local user.

Description

Ubuntu has issued an update for libgd2. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise an application using the library.

For more information:
SA25855
SA36791
SA37069

Solution

Apply updated packages.

-- Ubuntu 6.06 LTS --

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2_2.0.33-2ubuntu5.4.diff.gz
Size/MD5: 258547 04046c5a93a087f4f5ade0055bbf22cb
http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2_2.0.33-2ubuntu5.4.dsc
Size/MD5: 973 c7ce6a684cc67dbc69f03e03b54b51b2
http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2_2.0.33.orig.tar.gz
Size/MD5: 587617 be0a6d326cd8567e736fbc75df0a5c45

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-dev_2.0.33-2ubuntu5.4_all.deb
Size/MD5: 129774 a31ad9eacfd696ffe3fdef93acef73c3
http://security.ubuntu.com/ubuntu/pool/universe/libg/libgd2/libgd2_2.0.33-2ubuntu5.4_all.deb
Size/MD5: 129750 4d8c0ad2d083e789d953e6182d078ef4

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-noxpm-dev_2.0.33-2ubuntu5.4_amd64.deb
Size/MD5: 341658 4561d10b25acda7165cd538d88a9e5a9
http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-noxpm_2.0.33-2ubuntu5.4_amd64.deb
Size/MD5: 200492 e6457ffbe31f4e546d4484d5bd1bc2ed
http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-xpm-dev_2.0.33-2ubuntu5.4_amd64.deb
Size/MD5: 343380 0d023589f24ca1a95040993d1d4a30c1
http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-xpm_2.0.33-2ubuntu5.4_amd64.deb
Size/MD5: 202212 7cec8f0bc8704d35e453eb2b07a21e01
http://security.ubuntu.com/ubuntu/pool/universe/libg/libgd2/libgd-tools_2.0.33-2ubuntu5.4_amd64.deb
Size/MD5: 143136 f438666205ada39092897b6e959345d8

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-noxpm-dev_2.0.33-2ubuntu5.4_i386.deb
Size/MD5: 331210 a0480de5209f2e66de2164997c3bcb25
http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-noxpm_2.0.33-2ubuntu5.4_i386.deb
Size/MD5: 193572 b195270648b35995a62b1887995e4025
http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-xpm-dev_2.0.33-2ubuntu5.4_i386.deb
Size/MD5: 331984 a1a1c0b922638f2adcbd86188f689df1
http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-xpm_2.0.33-2ubuntu5.4_i386.deb
Size/MD5: 195218 100b604eb7ada1ac48c38fddaeeee7d5
http://security.ubuntu.com/ubuntu/pool/universe/libg/libgd2/libgd-tools_2.0.33-2ubuntu5.4_i386.deb
Size/MD5: 142190 8cb1e1126490d20129355cea61535cea