MGASA-2023-0278 - Updated giflib packages fix security vulnerability

Publication date: 30 Sep 2023
URL: https://advisories.mageia.org/MGASA-2023-0278.html
Type: security
Affected Mageia releases: 8, 9
CVE: CVE-2023-39742

The updated packages fix a security vulnerability:

giflib v5.2.1 was discovered to contain a segmentation fault via the
component getarg.c. (CVE-2023-39742)

References:
- https://bugs.mageia.org/show_bug.cgi?id=32303
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39742
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O4RLSFGPBPR3FMIUJCWPGVIYIU35YGQX/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39742

SRPMS:
- 8/core/giflib-5.2.1-5.2.mga8
- 9/core/giflib-5.2.1-7.1.mga9

Mageia 2023-0278: giflib security update

The updated packages fix a security vulnerability: giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c

Summary

The updated packages fix a security vulnerability:
giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c. (CVE-2023-39742)

References

- https://bugs.mageia.org/show_bug.cgi?id=32303

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39742

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O4RLSFGPBPR3FMIUJCWPGVIYIU35YGQX/

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39742

Resolution

MGASA-2023-0278 - Updated giflib packages fix security vulnerability

SRPMS

- 8/core/giflib-5.2.1-5.2.mga8

- 9/core/giflib-5.2.1-7.1.mga9

Severity
Publication date: 30 Sep 2023
URL: https://advisories.mageia.org/MGASA-2023-0278.html
Type: security
CVE: CVE-2023-39742

Related News