Vulmon
Amazon Linux AMI Security Advisory: ALAS-2023-1721
Advisory Release Date: 2023-03-30 22:50 Pacific
Advisory Updated Date: 2023-04-05 20:23 Pacific
Severity:
Important
Issue Overview:
** DISPUTED ** gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes." (CVE-2021-40145)
Affected Packages:
gd
Issue Correction:
Run yum update gd to update your system.
New Packages:
i686:
gd-devel-2.0.35-11.11.amzn1.i686
gd-2.0.35-11.11.amzn1.i686
gd-progs-2.0.35-11.11.amzn1.i686
gd-debuginfo-2.0.35-11.11.amzn1.i686
src:
gd-2.0.35-11.11.amzn1.src
x86_64:
gd-devel-2.0.35-11.11.amzn1.x86_64
gd-2.0.35-11.11.amzn1.x86_64
gd-progs-2.0.35-11.11.amzn1.x86_64
gd-debuginfo-2.0.35-11.11.amzn1.x86_64