Fedora: Gifsicle 1.90 Critical Update for Use-After-Free Issue

Gifsicle is a command-line tool for creating, editing, and getting

information about GIF images and animations.

Some more gifsicle features:

* Batch mode for changing GIFs in place.

* Prints detailed information about GIFs, including comments.

* Control over interlacing, comments, looping, transparency...

* Creates well-behaved GIFs: removes redundant colors, only uses local

color tables if it absolutely has to (local color tables waste space

and can cause viewing artifacts), etc.

* It can shrink colormaps and change images to use the Web-safe palette

(or any colormap you choose).

* It can optimize your animations! This stores only the changed portion

of each frame, and can radically shrink your GIFs. You can also use

transparency to make them even smaller. Gifsicle?s optimizer is pretty

powerful, and usually reduces animations to within a couple bytes of

the best commercial optimizers.

* Unoptimizing animations, which makes them easier to edit.

* A dumb-ass name.

One other program is included with gifsicle

and gifdiff compares two GIFs for identical visual appearance.

Update to 1.90 - Fixes CVE-2017-1000421

[ 1 ] Bug #1530540 - CVE-2017-1000421 gifsicle: use-after-free in the read_gif function [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1530540

su -c 'dnf upgrade gifsicle' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org