GD Graphics Library

LibGD 2.3.3 Bugs fixes, improved macOS, Windows builds support

2021-09-12T00:00:00+02:00

The LibGD team is proud to announce the 2.3.3 release of libgd. This release brings a few fixes as well as improved compilations and builds on all platforms. On Windows, vcpkg to install libGd dependencies is now well supported.

In the process, we also added CI using github actions for Linux (x64, arm64/neon, gcc and clan), Windows (x64, arm64, vc and mingw). We are looking for more supported platforms to add to our CI (BSD, all architectures, PowerPC, RiscV etc). If you have such systems and willing to let us run run the github actions CI on it, please let us know, it will be much appreciated.

Fixes:

#759 update cmake to generate config.h in the build dir
#756 2.3.3 release
#750 gdPutBuf return value check
#729 HEIF builds fail with latest distros
#678 segfault in heif tests due to missing label.heic
#677 Test failure avif/compare_avif_to_png with libavif-0.8.2
#661 imagecopyresampled() produce artifacts on transparent PNG
#611 Fixes to build v2.3.0 on Windows with MinGW-w64
#415 optimize option in gif animation causes segfault
#331 _gdContributionsCalc() always uses DEFAULT_BOX_RADIUS (gdImageScale internal sub method)
#320 gdImageRotateInterpolated() converts the source image to truecolor
#249 CMake and Makefiles build broken on Windows
#93 gdImageScaleTwoPass() looses top row and left column

For full list of changes, see CHANGELOG.md.

This is a recommended update.

You can download the 2.3.3 version of GD Graphics Library from the libgd 2.3.3 release.

Check out the full commits list since the previous release.

LibGD 2.3.2 release AVIF & HEIF support

2021-03-07T00:00:00+01:00

The LibGD team is proud to announce the 2.3.2 release of libgd.

Fixes:

gif: allow decodin when both Global and Local Colormaps (#494)

Added:

avif: Support for AVIF images via libavif (#494)
heif: Support for HEIF/AVIF images via libheif (#395) (#557)
webp: Drop ../deps/ search when building with cmake
Windows: Remove unused snprintf fallback

For full list of changes, see CHANGELOG.md.

This is a recommended update.

You can download the 2.3.2 version of GD Graphics Library from the libgd 2.3.2 release.

You can read the full commits list.

LibGD 2.3.1 release

2021-01-30T00:00:00+01:00

The LibGD team is proud to announce the 2.3.1 release of libgd.

Fixes:

Fix potential integer overflow detected by oss-fuzz

Fix #615 using libraqm

Fix #303: gdlib.pc: use Requires instead of Libs

Using uninitialized variables. (CVE-2019-11038)

Heap-based buffer overflow. (CVE-2019-6977)

Double-free in gdImage*Ptr(). (CVE-2019-6978)

For full list of changes, see CHANGELOG.md.

This is a recommended update.

You can download the 2.3.1 version of GD Graphics Library from the libgd 2.3.1 release.

Check out the full commits list since the previous release.

LibGD 2.3.0 release

2020-03-22T00:00:00+01:00

The LibGD team is proud to announce the 2.3.0 release of libgd.

Security related fixes:

Double-free vulnerability in gdImageBmpPtr. (CVE-2018-1000222)

Null pointer reference at gdImageClone. (CVE-2018-14553)

Integer signedness error. (CVE-2018-5711)

Using uninitialized variables. (CVE-2019-11038)

Heap-based buffer overflow. (CVE-2019-6977)

Double-free in gdImage*Ptr(). (CVE-2019-6978)

For full list of changes, see CHANGELOG.md.

This is a recommended update.

You can download the 2.3.0 version of GD Graphics Library from the libgd 2.3.0 release.

Check out the full commits list since the previous release.

LibGD 2.2.5 release

2017-08-30T00:00:00+02:00

The LibGD team is proud to announce the 2.2.5 release of libgd.

Security related fixes:

Double-free in gdImagePngPtr(). (CVE-2017-6362)

Buffer over-read into uninitialized memory. (CVE-2017-7890)

For full list of changes, see CHANGELOG.md.

This is a recommended update.

You can download the 2.2.5 version of GD Graphics Library from the libgd project.

Check out the full commits list since the previous release.

LibGD 2.2.4 release

2017-01-18T00:00:00+01:00

LibGD team is proud to announce the 2.2.4 release of libgd.

Security related fixes: This flaw is caused by loading data from external sources (file, custom ctx, etc) and are hard to validate before calling libgd APIs:

gdImageCreate() doesn't check for oversized images and as such is prone to DoS vulnerabilities. (CVE-2016-9317)

double-free in gdImageWebPtr() (CVE-2016-6912)

potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)

DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)

Signed Integer Overflow gd_io.c (CVE-2016-10168)

For full list of changes, see CHANGELOG.md.

This is a recommended update.

You can download the 2.2.4 version of GD Graphics Library from the libgd project.

Check out the full commits list since the previous release.

LibGD 2.2.3 release

2016-07-22T00:00:00+02:00

We welcome the 2.2.3 release around a month after 2.2.2 (we are getting consistent). Another important milestone in the GD 2.2 series.

Security related fixes: This flaw is caused by loading data from external sources (file, custom ctx, etc) and are hard to validate before calling libgd APIs:

fix php bug 72339, Integer Overflow in _gd2GetHeader (CVE-2016-5766)

bug #247, A read out-of-bands was found in the parsing of TGA files (CVE-2016-6132)

also bug #247, Buffer over-read issue when parsing crafted TGA file (CVE-2016-6214)

bug #248, fix Out-Of-Bounds Read in read_image_tga

Using application provided parameters, in these cases invalid data causes the issues:

Integer overflow error within _gdContributionsAlloc() (CVE-2016-6207)

fix php bug 72494, invalid color index not handled, can lead to crash (CVE-2016-6128)

improve color check for CropThreshold

Important update:

gdImageCopyResampled has been improved. Better handling of images with alpha channel, also brings libgd in sync with php's bundled gd.

This is a recommended update.

On a sidenote, we have now a gitter channel if you have any questions or like to discuss with us, gitter, in addition to our "#libgd" freenode channel.

You can download the 2.2.3 version of GD Graphics Library from the libgd project.

Check out the full commits list since the previous release.

LibGD 2.2.2 release

2016-06-25T00:00:00+02:00

Exactly a month after 2.2.1 we welcome the 2.2.2 release. An important milestone in the GD 2.2 series.

Security related fixes:

Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow (CVE-2016-5767)

#215 Stack overflow with gdImageFillToBorder (CVE-2015-8874, CVE-2016-9933)

NULL Pointer Dereference at _gdScaleVert

We also like to mention to consider the GD and GD2 image formats only for development or testing purposes. We do plan to deprecate it in GD 2.3 and remove it in GD 3.0. Its existence is not justified anymore as other formats provide lossless storage for both palette and truecolor images in a much more efficient way.

Numerous other fixes have been applied. The scale and rotation functions have been greatly improved as well.

This is a recommended update.

You can download the 2.2.2 version of GD Graphics Library from the libgd project.

Check out the full commits list since the previous release.

LibGD 2.2.1 release

2016-05-20T00:00:00+02:00

Hot on the tail of the 2.2.0 release, we've got 2.2.1 ready! A security issue was missed in the previous bug triaging but that's in here now.

This is a recommended update.

You can download the 2.2.1 version of GD Graphics Library from the libgd project.

Check out the full commits list since the previous release.

LibGD 2.2.0 release

2016-05-19T00:00:00+02:00

GD team proudly announces that the 2.2.0 version of GD Graphics Library has been released. We have fixed a good number of reported bugs. The cmake build is getting better, but most people should still use the configure script. See the Changelog files for a full list with details or CVEs.

This is a recommended update.

You can download the 2.2.0 version of GD Graphics Library from the libgd project.

Check out the full commits list since the previous release.

LibGD 2.1.1 final release

2015-01-14T00:00:00+01:00

GD team proudly announces that the 2.1.1 version of GD Graphics Library has been released. We have fixed some reported bugs and improved the build scripts (cmake and configure). See the Changelog files for a full list with details or CVEs.

This is a recommended update.

You can download the 2.1.1 version of GD Graphics Library from the libgd project.

We would like to invite everyone to update the new library and report any issue found to our issue tracker.

LibGD 2.1.0 final release

2013-05-24T00:00:00+02:00

GD team proudly announces that the 2.1.0 version of GD Graphics Library has been released. We have fixed some reported bugs and improved the build scripts (cmake and configure).

You can download the 2.1.0 version of GD Graphics Library from the libgd project.

We would like to invite everyone to update the new library and report any issue found to our issue tracker. The 2.0 serie is not maintained anymore. While 2.1.0 APIs is fully compatible with 2.0. However ABIs has been broken so a rebuild/link will be required.

The GD team will now focus mainly on gd 2.2 and no new features will be added to 2.1.

LibGD 2.1.0-rc1 release

2013-05-24T00:00:00+02:00

GD team proudly announces that the 2.1.0-rc1 version of GD Graphics Library has been released. We have fixed some reported bugs and glitches and so far everything looks fine and stable, thus we are releasing RC1. No more functionality will be added, just bugfixes.

You can download the 2.1.0-rc1 version of GD Graphics Library from the libgd project.

We would like to invite everyone to come and test the new library and report any issue found to our issue tracker.

LibGD 2.1.0-alpha1 release

2013-04-10T00:00:00+02:00

GD team proudly announces that the 2.1.0-alpha1 version of GD Graphics Library has been released. Most of the improvements that PHP GD team had made to GD Graphics Library has been merged into 2.1.0-alpha1 release.

You can download the 2.1.0-alpha1 version of GD Graphics Library from the libgd project.

We would like to invite everyone to come and test the new library and report any issue found to our issue tracker.

New libgd.org website

2013-04-09T00:00:00+02:00

The libgd.org has a new website. We have built the new site in Pelican in order to statically render our site content. You can view the sources used to build this website in its own git repository.