libgd2 2.0.33-2ubuntu5.4 source package in Ubuntu

Changelog

libgd2 (2.0.33-2ubuntu5.4) dapper-security; urgency=low

  * SECURITY UPDATE: denial of service via GIF image with no global color
    map
    - debian/patches/06_SECURITY_CVE-2007-3475.patch: make sure we have a
      global color map in gd_gif_in.c.
    - CVE-2007-3475
  * SECURITY UPDATE: denial of service via large color index values
    - debian/patches/07_SECURITY_CVE-2007-3476.patch: compare with
      gdMaxColors in gd_gif_in.c.
    - CVE-2007-3476
  * SECURITY UPDATE: denial of service via large start or end angle degree
    value
    - debian/patches/08_SECURITY_CVE-2007-3477.patch: validate start and
      end values in gd.c.
    - CVE-2007-3477
  * SECURITY UPDATE: denial of service and possible code execution via
    large color index
    - debian/patches/09_SECURITY_CVE-2009-3293.patch: validate color index
      in gd.c.
    - CVE-2009-3293
  * SECURITY UPDATE: denial of service and possible code execution via GD
    file with large number of colors
    - debian/patches/10_SECURITY_CVE-2009-3546.patch: make sure number of
      colors specified in gd file isn't bigger than gdMaxColors in gd_gd.c.
    - CVE-2009-3546
 -- Marc Deslauriers <email address hidden>   Wed, 04 Nov 2009 10:02:17 -0500