Critical Security Flaw in GD Package: Red Hat Security Advisory RHSA-2026:85099
Summary
RHSA-2026:85099: Red Hat Security Advisory: gd security update. Affects gd versions < 0:2.2.5-7.el8_6.1. Fixed in 0:2.2.5-7.el8_6.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The GD package is a widely used graphics library that enables developers to create and manipulate images in various formats. It is essential for applications that require image processing capabilities, such as web servers and graphic design tools. The package is integral to many systems, particularly those running on Red Hat Enterprise Linux (RHEL). However, it has recently been identified as vulnerable to a security issue that could compromise the integrity and confidentiality of data.
Vulnerability Detail
The vulnerability identified as CVE-2026-9672 in the GD package allows for potential exploitation due to improper handling of certain inputs. This flaw could lead to unauthorized access to sensitive data, denial of service, or even remote code execution, depending on the attack vector. The vulnerability has a CVSS score of 8.1, indicating a high severity level that necessitates immediate attention from system administrators and developers.
How To Fix
Minimum fixed version
0:2.2.5-7.el8_6.1
This is the first release that contains the fix.
sudo dnf update gdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not feasible, consider implementing input validation to mitigate the risk of exploitation. This can involve sanitizing user inputs and restricting access to sensitive functionalities until the package can be updated.
Conclusion
The GD package has a critical vulnerability that requires immediate attention. By updating to the patched version and implementing recommended workarounds, you can safeguard your systems against potential exploitation. Regular monitoring and vulnerability assessments are essential to maintain security.
See every vulnerability recorded for gd →
FAQ
CVE-2026-9672 is a security vulnerability in the GD package that could allow unauthorized access to sensitive data or lead to denial of service.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for this vulnerability is 8.1, indicating a high severity level.
Implement input validation and restrict access to sensitive functionalities as a temporary workaround until you can apply the patch.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:85099.json.
Related vulnerabilities
Recent vulnerabilities recorded for gd.
