REDHAT-BUG-1671390: Double Free
The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImagePtr() functions in gdgifout.c, gdjpeg.c, and gdwbmp.c. NOTE: PHP is unaffected.
References: https://github.com/libgd/libgd/issues/492
Upstream Patch: https://github.com/libgd/libgd/commit/553702980ae89c83f2d6e254d62cf82e204956d0 https://github.com/php/php-src/commit/089f7c0bc28d399b0420aa6ef058e4c1c120b2ae
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1671390?
The vulnerability REDHAT-BUG-1671390 is classified as a medium severity due to the potential for a double free attack.
How do I fix REDHAT-BUG-1671390?
To fix REDHAT-BUG-1671390, update the GD Graphics Library to version 2.2.6 or later, which includes the necessary patches.
What systems are affected by REDHAT-BUG-1671390?
Systems utilizing GD Graphics Library version 2.2.5 are affected by REDHAT-BUG-1671390.
Is PHP affected by REDHAT-BUG-1671390?
No, PHP is not affected by the vulnerability described in REDHAT-BUG-1671390.
What are the key functions involved in REDHAT-BUG-1671390?
The key functions involved in REDHAT-BUG-1671390 are gdImage*Ptr() in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c.