Login
Newsletter
Werbung

Sicherheit: Mehrere Probleme in gif2apng
Aktuelle Meldungen Distributionen
Name: Mehrere Probleme in gif2apng
ID: USN-5969-1
Distribution: Ubuntu
Plattformen: Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 16.04 ESM
Datum: Fr, 24. März 2023, 07:23
Referenzen: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45911
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45909
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45910
Applikationen: gif2apng

Originalnachricht


--===============1805986751867179412==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature";
boundary="mw3rdemhl3ykgvc2"
Content-Disposition: inline


--mw3rdemhl3ykgvc2
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

==========================================================================
Ubuntu Security Notice USN-5969-1
March 23, 2023

gif2apng vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 ESM

Summary:

Several security issues were fixed in gif2apng.

Software Description:
- gif2apng: tool for converting animated GIF images to APNG format

Details:

It was discovered that gif2apng contained multiple heap-base overflows. An
attacker could potentially exploit this to cause a denial of service (system
crash). (CVE-2021-45909, CVE-2021-45910, CVE-2021-45911)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
gif2apng 1.9+srconly-3ubuntu0.1

Ubuntu 18.04 LTS:
gif2apng 1.9+srconly-2ubuntu0.1

Ubuntu 16.04 ESM:
gif2apng 1.7-3ubuntu0.1~esm1

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-5969-1
CVE-2021-45909, CVE-2021-45910, CVE-2021-45911

Package Information:
https://launchpad.net/ubuntu/+source/gif2apng/1.9+srconly-3ubuntu0.1
https://launchpad.net/ubuntu/+source/gif2apng/1.9+srconly-2ubuntu0.1

--mw3rdemhl3ykgvc2
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=43Pm
-----END PGP SIGNATURE-----

--mw3rdemhl3ykgvc2--


--===============1805986751867179412==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline


--===============1805986751867179412==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung