UbuntuUpdates.org

Package "libgif7"

Name: libgif7

Description:

library for GIF images (library)
Latest version: 5.1.9-1ubuntu0.1
Release: focal (20.04)
Level: security
Repository: main
Head package: giflib
Homepage: http://giflib.sourceforge.net/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libgif7"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libgif7" in Focal

Repository Area Version
base main 5.1.9-1
updates main 5.1.9-1ubuntu0.1

Changelog

Version: 5.1.9-1ubuntu0.1 2024-06-10 15:07:02 UTC

  giflib (5.1.9-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2021-40633.patch: Clean up memory better at end
      of run (CVE-2021-40633)
    - debian/patches/CVE-2023-39742.patch: Fix SourceForge bug #153,
      segfault in getarg.c
    - CVE-2021-40633
    - CVE-2023-39742
  * SECURITY UPDATE: Heap buffer overflow
    - debian/patches/CVE-2022-28506.patch: Fix heap-buffer overflow
    - CVE-2022-28506

 -- Giampaolo Fresi Roglia <email address hidden> Thu, 06 Jun 2024 13:50:06 +0200
CVE-2021-40633 A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of se
CVE-2023-39742 giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.
CVE-2022-28506 There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.


About   -   Send Feedback to @ubuntu_updates