Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 42: 2025-928071dafb critical: giflib buffer overflow

fedora
Calendar Grey April 17, 2025
Dist Fedora Esm H88
To update giflib on Fedora 42, first obtain the gif_getarg.h header file, then apply the backport fix to resolve the buffer overflow issue and boost security
Backport proposed fix for CVE-2025-31344 from OpenMandriva

Summary

giflib is a library for reading and writing gif images.

Update Information:

Backport proposed fix for CVE-2025-31344 from OpenMandriva. Install gif_getarg.h header.

Topics%20covered

Topics Covered

security advisory fedora buffer overflow software update vulnerability giflib

Change Log

* Tue Apr 15 2025 Sandro Mani - 5.2.2-6 - Add proposed patch for CVE-2025-31334 * Wed Apr 2 2025 Benson Muite - 5.2.2-5 - Rename getarg.h to gif_getarg.h * Wed Apr 2 2025 Benson Muite - 5.2.2-4 - Install getarg.h header file

References


[ 1 ] Bug #2356849 - Install header file getarg.h https://bugzilla.redhat.com/show_bug.cgi?id=2356849 [ 2 ] Bug #2359431 - CVE-2025-31344 giflib: The giflib open-source component has a buffer overflow vulnerability [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2359431 [ 3 ] Bug #2359442 - CVE-2025-31344 giflib: The giflib open-source component has a buffer overflow vulnerability [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2359442

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-928071dafb' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: giflib
Product: Fedora 42
Version: 5.2.2
Release: 6.fc42
URL:
Summary: A library and utilities for processing GIFs

Topics%20covered

Topics Covered

security advisory fedora buffer overflow software update vulnerability giflib

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here