=========================================================== 
Ubuntu Security Notice USN-473-1              June 11, 2007
libgd2 vulnerabilities
CVE-2007-0455, CVE-2007-2756
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 6.10
Ubuntu 7.04

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libgd2-noxpm                             2.0.33-2ubuntu5.2
  libgd2-xpm                               2.0.33-2ubuntu5.2

Ubuntu 6.10:
  libgd2-noxpm                             2.0.33-4ubuntu2.1
  libgd2-xpm                               2.0.33-4ubuntu2.1

Ubuntu 7.04:
  libgd2-noxpm                             2.0.34~rc1-2ubuntu1.1
  libgd2-xpm                               2.0.34~rc1-2ubuntu1.1

After a standard system upgrade you need to reboot your computer to
effect the necessary changes.

Details follow:

A buffer overflow was discovered in libgd2's font renderer.  By tricking
an application using libgd2 into rendering a specially crafted string
with a JIS encoded font, a remote attacker could read heap memory or
crash the application, leading to a denial of service. (CVE-2007-0455)

Xavier Roche discovered that libgd2 did not correctly validate PNG
callback results.  If an application were tricked into processing a
specially crafted PNG image, it would monopolize CPU resources.  Since
libgd2 is often used in PHP and Perl web applications, this could lead
to a remote denial of service. (CVE-2007-2756)


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:   256873 8a8c75ce9c758b08a469529dd55c761b
          Size/MD5:      965 fc70ffc72898f2721f19b6bd73eacf20
          Size/MD5:   587617 be0a6d326cd8567e736fbc75df0a5c45

  Architecture independent packages:

          Size/MD5:   129406 fef2507d7ed87eb033a3ec1075eae8d0
          Size/MD5:   129384 1a94025235145b79dec9002f40500005

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:   142846 b5610b98a36002b562ae6efca20a4bd0
          Size/MD5:   340982 eb728432aead858617e247f49fed54dd
          Size/MD5:   199788 7f18d19d1d7beb99796c75c7f5072b5b
          Size/MD5:   342712 918a27b0d930c3a31845e06d082d0e04
          Size/MD5:   201496 3dc69c3cbae3017174c8be38a709d052

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:   141828 eb8dc3cdafd552648255d0f9a28b6918
          Size/MD5:   330562 4e5c907bf850e5d753382eaf5b1e270c
          Size/MD5:   192728 13e5578cc6825b0de8c5b7e4338a5822
          Size/MD5:   331338 de1468e02a69d450f951fcc6ea3a8943
          Size/MD5:   194450 6c258fd9c37bc11d0801b8e672598b63

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:   151018 6a577bbe08bfb8745e35f9be83ffb70a
          Size/MD5:   341892 5e67b78f8bc143fa802414589724a267
          Size/MD5:   199822 5bc9a7b242fd3e9a7b1432f3aef76fd8
          Size/MD5:   343798 5d3ccc5fef86fdfe98a8d4003c52ae67
          Size/MD5:   201490 2b7c168be06a4f127a1ee4978a03a479

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:   142090 966c1746528bc1e2a2eb7311f8154a68
          Size/MD5:   333674 aba33f0a8d1fb264fca0a36d2a13e496
          Size/MD5:   194034 2265a78c27e47ca22518f25aa1a6dcea
          Size/MD5:   335000 52dcb256662a72cb5e4a736e874f25e2
          Size/MD5:   195916 41c1a3d322eefa06cd4e3f04921b096f

Updated packages for Ubuntu 6.10:

  Source archives:

          Size/MD5:   264583 65f45c16574bc9376de4e618d699947c
          Size/MD5:      955 077d1a11e3b050e53d896301d3b87e04
          Size/MD5:   587617 be0a6d326cd8567e736fbc75df0a5c45

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:   145126 c83d8c72882225ade76928e5f5efb261
          Size/MD5:   343696 33901fa9c87912111496436ae6cc80ce
          Size/MD5:   202154 50954323f18f9d423a610475499a0c03
          Size/MD5:   345384 7d59fb92b24918330d1de2d80304cae1
          Size/MD5:   203806 8b37563e247c746c93a286d67daa29df

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:   143862 9b071c10c54b761b0b6542dde2d6d5f5
          Size/MD5:   333932 b6b58c1dcd5136420e4746a05e541109
          Size/MD5:   197634 4aa06edab6e88701b1cc5594e2a6495f
          Size/MD5:   335424 799c8ba7d1f7f1b4094353f63f1baafc
          Size/MD5:   199288 359f1e24b45e8a74e376564812466a48

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:   152960 7b5e3e4e9c0b73cc06063d92db93f8e9
          Size/MD5:   344844 b5ef204b2ea559225a58c84e37d33913
          Size/MD5:   202392 d879dd6a3998ea7bceb76e8d98defcb2
          Size/MD5:   346742 7d3bf87d25efcc6cc33966c8ea0e03fd
          Size/MD5:   203724 5c346a13ccfbd68a9bf35fc0e43eb9d9

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:   144230 89b11a43fc58506fe480090a48ce3bc5
          Size/MD5:   336452 c46ecc69e655a038650bff5bba19dff0
          Size/MD5:   197000 4f1bab3cac675ab3c9afc3f3232652d0
          Size/MD5:   338622 9f11fb371e683f9efd46bda895393270
          Size/MD5:   198878 f9f95c40ce6733835a89ed70f8698ed7

Updated packages for Ubuntu 7.04:

  Source archives:

          Size/MD5:    21674 ef3adc9a70dae06fac9a85621117dbe9
          Size/MD5:      916 5187f533b03cc3720afa516c94750996
          Size/MD5:  1261537 bfaf9bb0ebee54560b311e739e531c01

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:   147140 bef991dcaf75f7a0790dd6e8b4b68007
          Size/MD5:   347506 257aa8e12346981c841cfaca3d6a3bad
          Size/MD5:   206664 c19d956570c218911de9a44a5b925573
          Size/MD5:   349814 1f80c9752f5400ce210db4cdfe4e245f
          Size/MD5:   209032 2ec429476d00985a46d7bb297f824df1

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:   145890 793273f3dcc7d6cb01a643acc432ae59
          Size/MD5:   337246 4bceba1b1c6e89a3c49c89372df073da
          Size/MD5:   202638 982781014bcce40a8a07cd132175b03c
          Size/MD5:   340240 13908498289b84bda88c54a560ec7708
          Size/MD5:   204584 f5de4a4663034fe479be0dd0e034b988

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:   157844 211c610828e7b3d142704c44eca4fba3
          Size/MD5:   348284 44c88c50a6f8072f2ab32cb623300b03
          Size/MD5:   209936 df2da29b8ff1ecb8e50eff803e69574e
          Size/MD5:   350614 bfc8a848b8691dfbed13a7c8924a6576
          Size/MD5:   211532 25e60da2cad25369b325a0bdf1ae55a7

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:   146828 306d2616c4123c3a8d5293f94e59a0b1
          Size/MD5:   339724 7827f6e20636bcba6480f7676984b26d
          Size/MD5:   201834 502372f3b2d959b95007c2472cd0f91c
          Size/MD5:   343018 945aec87e60f348c0d8770390459641c
          Size/MD5:   204202 233570b639f9cf58c02f89d445478f72