{"id":"CLSA-2021-1635459219","summary":"Fix CVE(s): CVE-2021-40812, CVE-2021-40145, CVE-2021-38115, CVE-2017-6363","details":"\n   * SECURITY UPDATE: unhandled memory allocation error in gdImageGd2Ptr\n     - debian/patches/CVE-2021-40145.patch: check for non-zero return\n       code from _gdImageGd2\n     - CVE-2021-40145\n   * SECURITY UPDATE: unhandled value returned from gdPutBuf\n     - debian/patches/CVE-2021-40812.patch: handle possible gdPutBuf\n       error in _gdImageBmpCtx and _gdImageWebpCtx\n       CVE-2021-40812\n   * SECURITY UPDATE: unhandled value returned from gdGetBuf\n     - debian/patches/CVE-2021-38115.patch: handle possible gdGetBuf\n       error in read_header_tga\n       CVE-2021-38115\n   * SECURITY UPDATE: handle possible heap buffer overread\n     - debian/patches/CVE-2017-6363.patch: make sure transparent\n       index is within bounds of the palette\n       CVE-2017-6363","modified":"2026-06-04T10:04:30.579971426Z","published":"2021-10-28T22:13:39Z","upstream":["CVE-2017-6363","CVE-2021-38115","CVE-2021-40145","CVE-2021-40812"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1635459219"}],"affected":[{"package":{"name":"libgd-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libgd-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-4ubuntu0.16.04.13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459219.json"}},{"package":{"name":"libgd-tools","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libgd-tools?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-4ubuntu0.16.04.13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459219.json"}},{"package":{"name":"libgd3","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libgd3?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-4ubuntu0.16.04.13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459219.json"}}],"schema_version":"1.7.5"}