UbuntuUpdates.org

Package "gif2apng"

Name: gif2apng

Description:

tool for converting animated GIF images to APNG format
Latest version: 1.9+srconly-3ubuntu0.1
Release: focal (20.04)
Level: security
Repository: universe
Homepage: https://sourceforge.net/projects/gif2apng

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "gif2apng"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "gif2apng" in Focal

Repository Area Version
base universe 1.9+srconly-3build1
updates universe 1.9+srconly-3ubuntu0.1

Changelog

Version: 1.9+srconly-3ubuntu0.1 2023-03-23 22:06:57 UTC

  gif2apng (1.9+srconly-3ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds Write
    - debian/patches/CVE-2021-45909.patch: fix heap based buffer overflow
      within the DecodeLZW function.
    - debian/patches/CVE-2021-45910.patch: fix heap based buffer overflow
      within the main function.
    - debian/patches/CVE-2021-45911.patch: fix heap based buffer overflow
      within the main function.
    - CVE-2021-45909
    - CVE-2021-45910
    - CVE-2021-45911

 -- Paulo Flabiano Smorigo <email address hidden> Fri, 17 Mar 2023 10:38:12 -0300
CVE-2021-45909 An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function. It allows an attacker to writ
CVE-2021-45910 An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main function. It allows an attacker to write data outside
CVE-2021-45911 An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow in the main function. It allows an attacker to write 2 bytes outside t


About   -   Send Feedback to @ubuntu_updates