Fedora 27: 2018-9892225623 Critical: Gifsicle Double-Free Fix

Gifsicle is a command-line tool for creating, editing, and getting

information about GIF images and animations.

Some more gifsicle features:

* Batch mode for changing GIFs in place.

* Prints detailed information about GIFs, including comments.

* Control over interlacing, comments, looping, transparency...

* Creates well-behaved GIFs: removes redundant colors, only uses local

color tables if it absolutely has to (local color tables waste space

and can cause viewing artifacts), etc.

* It can shrink colormaps and change images to use the Web-safe palette

(or any colormap you choose).

* It can optimize your animations! This stores only the changed portion

of each frame, and can radically shrink your GIFs. You can also use

transparency to make them even smaller. Gifsicle?s optimizer is pretty

powerful, and usually reduces animations to within a couple bytes of

the best commercial optimizers.

* Unoptimizing animations, which makes them easier to edit.

* A dumb-ass name.

One other program is included with gifsicle

and gifdiff compares two GIFs for identical visual appearance.

Update to 1.91 - fixes double-free in read_gif

* Mon May 21 2018 Orion Poplawski - 1.91-1

- Update to 1.91

* Wed Feb 7 2018 Fedora Release Engineering - 1.90-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[ 1 ] Bug #1542037 - CVE-2017-18120 gifsicle: Double-free in the read_gif function [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1542037

[ 2 ] Bug #1114293 - gifsicle-1.91 is available

https://bugzilla.redhat.com/show_bug.cgi?id=1114293

su -c 'dnf upgrade --advisory FEDORA-2018-9892225623' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BGGLSEKCDM2OZ67XRI7KOASI4G7PRUX2/