Most recent entries from all

ALSA-2020:4659 — Moderate: gd security update

Affected: AlmaLinux:8: gd, AlmaLinux:8: gd-devel

GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats.

Security Fix(es):

* gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c (CVE-2019-6977)

* gd: NULL pointer dereference in gdImageClone (CVE-2018-14553)

* gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-05698

Withdrawn: BELL-CVE-2018-14553 — CVE-2018-14553 does not affect BellSoft software

Withdrawn by the publisher.

EUVD-2026-67094

fkie_cve-2018-14553

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).

GHSA-jw3x-9g83-4hvr

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing atteckers to crash an application via a specific function call sequence.

gsd-2018-14553

openSUSE-SU-2020:0332-1 — Security update for gd

Security update for gd

SUSE-SU-2020:0594-1 — Security update for gd

Security update for gd

UBUNTU-CVE-2018-14553

Affected: Ubuntu:Pro:14.04:LTS: libgd2, Ubuntu:16.04:LTS: libgd2, Ubuntu:18.04:LTS: libgd2, Ubuntu:20.04:LTS: doxygen, Ubuntu:22.04:LTS: doxygen, Ubuntu:24.04:LTS: doxygen, Ubuntu:25.10: doxygen, Ubuntu:26.04:LTS: doxygen