------------------------------------------------------------------------
Pardus Linux Security Advisory 2009-173           security@pardus.org.tr
------------------------------------------------------------------------
      Date: 2009-11-02
  Severity: 3
      Type: Remote
------------------------------------------------------------------------

Summary
======
An integer overflow has been found in GD package which can be exploited
by malicious people to potentially cause denial  of  service.

[UPDATE] Same issue was fixed in Pardus 2008, please update your system.


Description
==========
The _gdGetColors function in the GD  Graphics  Library  2.x,  does  not
properly verify a certain colorsTotal tructure member, which might allow
remot attackers to conduct buffer overflow or buffer over-read  attacks
via a crafted GD file


Affected packages:

  Pardus 2009:
    gd, all before 2.0.35-7-4
  Pardus 2008:
    gd, all before 2.0.35-7-2


Resolution
=========
There are update(s) for gd. You can update them via Package Manager  or
with a single command from console:

  Pardus 2008:
    pisi up gd

  Pardus 2009:
    pisi up gd


References
=========
  * http://bugs.pardus.org.tr/show_bug.cgi?id411
  * http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546