Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Fedora 33: 2021-b349650e52 Critical: Gifsicle NULL Pointer Fix

fedora
Calendar Grey September 23, 2021
Dist Fedora Esm H88
Attention users! A new update for Fedora is now available; it upgrades gifsicle to version 1.93, which fixes a serious NULL pointer flaw to improve overall system reliability.
Update to 1.93, fixes CVE-2020-19752

Summary

Gifsicle is a command-line tool for creating, editing, and getting

information about GIF images and animations.

Some more gifsicle features:

* Batch mode for changing GIFs in place.

* Prints detailed information about GIFs, including comments.

* Control over interlacing, comments, looping, transparency...

* Creates well-behaved GIFs: removes redundant colors, only uses local

color tables if it absolutely has to (local color tables waste space

and can cause viewing artifacts), etc.

* It can shrink colormaps and change images to use the Web-safe palette

(or any colormap you choose).

* It can optimize your animations! This stores only the changed portion

of each frame, and can radically shrink your GIFs. You can also use

transparency to make them even smaller. Gifsicle?s optimizer is pretty

powerful, and usually reduces animations to within a couple bytes of

the best commercial optimizers.

* Unoptimizing animations, which makes them easier to edit.

* A dumb-ass name.

One other program is included with gifsicle

and gifdiff compares two GIFs for identical visual appearance.

Update to 1.93, fixes CVE-2020-19752

* Thu Jul 1 2021 Orion Poplawski - 1.93-1

- Update to 1.93

* Tue Jan 26 2021 Fedora Release Engineering - 1.92-6

- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[ 1 ] Bug #2004042 - CVE-2020-19752 gifsicle: NULL pointer dereference in find_color_or_error function

https://bugzilla.redhat.com/show_bug.cgi?id=2004042

su -c 'dnf upgrade --advisory FEDORA-2021-b349650e52' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 33
Version: 1.93
Release: 1.fc33
Summary: Powerful program for manipulating GIF images and animations

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here