gd security update

CentOS Errata and Security Advisory CESA-2006:0194

The gd package contains a graphics library used for the dynamic creation of
images such as PNG and JPEG.

Several buffer overflow flaws were found in the way gd allocates memory.
An attacker could create a carefully crafted image that could execute
arbitrary code if opened by a victim using a program linked against the gd
library. The Common Vulnerabilities and Exposures project (cve.mitre.org)
assigned the name CVE-2004-0941 to these issues.

Users of gd should upgrade to these updated packages, which contain a
backported patch and is not vulnerable to these issues.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2006-February/074767.html
https://lists.centos.org/pipermail/centos-announce/2006-February/074768.html
https://lists.centos.org/pipermail/centos-announce/2006-February/074769.html
https://lists.centos.org/pipermail/centos-announce/2006-February/074770.html
https://lists.centos.org/pipermail/centos-announce/2006-February/074771.html

Affected packages:
gd
gd-devel
gd-progs

Upstream details at:
https://access.redhat.com/errata/RHSA-2006:0194