A new updated gd package within CloudLinux OS 6 ELS has been scheduled for gradual rollout from our production repository.

Rollout slot: 2
Rolled out to: 0.1%
ETA for 100% rollout: November 2

Changelog

gd-2.0.35-12.el6.cloudlinux.els

• Add check for memory allocation errors processing GD2 images (CVE-2021-40145)
• Make sure transparent index is within bounds of the palette (CVE-2017-6363)

Update command

yum update gd*

Immediate update (via bypass)

yum update gd* --enablerepo=cloudlinux-rollout-2-bypass