OESA-2026-4514

Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-4514
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-4514.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-4514
Upstream
  • CVE-2026-9672
Published
2026-10-22T14:36:03Z
Modified
2026-10-22T14:45:07Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L CVSS Calculator
Summary
gd security update
Details

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. The most common applications of GD involve website development, although it can be used with any standalone application!

Security Fix(es):

libgd: buffer overflow when processing specially crafted GIF file(CVE-2026-9672)

Database specific
{
    "severity":  "Medium"
}
References

Affected packages

openEuler:22.03-LTS-SP4 / gd

Package

Name
gd
Purl
pkg:rpm/openEuler/gd&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.3.3-5.oe2203sp4

Ecosystem specific

{
    "aarch64":  [
        "gd-2.3.3-5.oe2203sp4.aarch64.rpm",
        "gd-debuginfo-2.3.3-5.oe2203sp4.aarch64.rpm",
        "gd-debugsource-2.3.3-5.oe2203sp4.aarch64.rpm",
        "gd-devel-2.3.3-5.oe2203sp4.aarch64.rpm",
        "gd-progs-2.3.3-5.oe2203sp4.aarch64.rpm"
    ],
    "src":  [
        "gd-2.3.3-5.oe2203sp4.src.rpm"
    ],
    "x86_64":  [
        "gd-2.3.3-5.oe2203sp4.x86_64.rpm",
        "gd-debuginfo-2.3.3-5.oe2203sp4.x86_64.rpm",
        "gd-debugsource-2.3.3-5.oe2203sp4.x86_64.rpm",
        "gd-devel-2.3.3-5.oe2203sp4.x86_64.rpm",
        "gd-progs-2.3.3-5.oe2203sp4.x86_64.rpm"
    ]
}

Database specific

source
"https://repo.openeuler.org/security/data/osv/OESA-2026-4514.json"