Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-6978

Fixed in a distro release EPSS 4%

The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected.

Published 2019-01-28 · CVE record · OSV

Products: libgd, debian_linux, canonical ubuntu_linux

Distro releases

ReleasePackageFixed in
AlmaLinux 8gd2.2.5-7.el8
AlmaLinux 8gd-devel2.2.5-7.el8
AlmaLinux 8libwmf0.2.9-8.el8_0
AlmaLinux 8libwmf-devel0.2.9-8.el8_0
AlmaLinux 8libwmf-lite0.2.9-8.el8_0
Alpine 3.10gd2.2.5-r2
Alpine 3.11gd2.2.5-r2
Alpine 3.12gd2.2.5-r2
Alpine 3.13gd2.2.5-r2
Alpine 3.14gd2.2.5-r2
Alpine 3.15gd2.2.5-r2
Alpine 3.16gd2.2.5-r2
Alpine 3.17gd2.2.5-r2
Alpine 3.18gd2.2.5-r2
Alpine 3.19gd2.2.5-r2
Alpine 3.20gd2.2.5-r2
Alpine 3.21gd2.2.5-r2
Alpine 3.22gd2.2.5-r2
Alpine 3.23gd2.2.5-r2
Alpine 3.24gd2.2.5-r2
Alpine 3.6gd2.2.5-r2
Alpine 3.7gd2.2.5-r2
Alpine 3.8gd2.2.5-r2
Alpine 3.9gd2.2.5-r2
Amazon Linux 2libwmf0.2.8.4-41.amzn2.0.3
Amazon Linux 2libwmf-devel0.2.8.4-41.amzn2.0.3
Amazon Linux 2libwmf-lite0.2.8.4-41.amzn2.0.3
Arch Linuxgd2.2.5-2
Debian 12libgd22.2.5-5.1
Debian 13libgd22.2.5-5.1
Debian 14libgd22.2.5-5.1
Debian 8libgd22.1.0-5+deb8u12
Debian 9libgd22.2.4-2+deb9u4
Red Hat Enterprise Linux 7libwmf0:0.2.8.4-44.el7
Red Hat Enterprise Linux 7libwmf-debuginfo0:0.2.8.4-44.el7
Red Hat Enterprise Linux 7libwmf-devel0:0.2.8.4-44.el7
Red Hat Enterprise Linux 7libwmf-lite0:0.2.8.4-44.el7
Red Hat Enterprise Linux 8gd0:2.2.5-7.el8
Red Hat Enterprise Linux 8gd-debuginfo0:2.2.5-7.el8
Red Hat Enterprise Linux 8gd-debugsource0:2.2.5-7.el8
Red Hat Enterprise Linux 8gd-devel0:2.2.5-7.el8
Red Hat Enterprise Linux 8gd-progs-debuginfo0:2.2.5-7.el8
Red Hat Enterprise Linux 8libwmf0:0.2.9-8.el8_0
Red Hat Enterprise Linux 8libwmf-debuginfo0:0.2.9-8.el8_0
Red Hat Enterprise Linux 8libwmf-debugsource0:0.2.9-8.el8_0
Red Hat Enterprise Linux 8libwmf-devel0:0.2.9-8.el8_0
Red Hat Enterprise Linux 8libwmf-lite0:0.2.9-8.el8_0
Red Hat Enterprise Linux 8libwmf-lite-debuginfo0:0.2.9-8.el8_0
Rocky Linux 8gd0:2.2.5-7.el8
Rocky Linux 8libwmf0:0.2.9-8.el8_0
SUSE Linux Enterprise Desktop 12 SP3gd2.1.0-24.12.1
SUSE Linux Enterprise Desktop 12 SP4gd2.1.0-24.12.1
SUSE Linux Enterprise Module for Basesystem 15gd2.2.5-4.6.1
SUSE Linux Enterprise Module for Desktop Applications 15gd2.2.5-4.6.1
SUSE Linux Enterprise Module for Package Hub 15 SP4libwmf0.2.12-150000.4.4.1
SUSE Linux Enterprise Module for Web and Scripting 12php77.0.7-50.63.1
SUSE Linux Enterprise Server 11 SP4php535.3.17-112.53.1
SUSE Linux Enterprise Server 12 SP3gd2.1.0-24.12.1
SUSE Linux Enterprise Server 12 SP4gd2.1.0-24.12.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4php535.3.17-112.53.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3gd2.1.0-24.12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4gd2.1.0-24.12.1
SUSE Linux Enterprise Software Development Kit 11 SP4php535.3.17-112.53.1
SUSE Linux Enterprise Software Development Kit 12 SP3gd2.1.0-24.12.1
SUSE Linux Enterprise Software Development Kit 12 SP3php77.0.7-50.63.1
SUSE Linux Enterprise Software Development Kit 12 SP4gd2.1.0-24.12.1
SUSE Linux Enterprise Software Development Kit 12 SP4php77.0.7-50.63.1
SUSE Linux Enterprise Software Development Kit 12 SP5libwmf0.2.12-243.3.1
SUSE Linux Enterprise Workstation Extension 12 SP3gd2.1.0-24.12.1
SUSE Linux Enterprise Workstation Extension 12 SP4gd2.1.0-24.12.1
SUSE Linux Enterprise Workstation Extension 12 SP5libwmf0.2.12-243.3.1
SUSE Linux Enterprise Workstation Extension 15 SP3libwmf0.2.12-150000.4.4.1
Ubuntu 14.04 LTSlibgd22.1.0-3ubuntu0.11
Ubuntu 16.04 LTSlibgd22.1.1-4ubuntu0.16.04.11
Ubuntu 18.04 LTSlibgd22.2.5-4ubuntu0.3
openSUSE Leap 15.0gd2.2.5-lp150.8.1
openSUSE Leap 15.3libwmf0.2.12-150000.4.4.1
openSUSE Leap 15.4libwmf0.2.12-150000.4.4.1
openSUSE Tumbleweedgd2.3.3-1.1