Описание
Security update for giflib
giflib was updated to fix one security issue.
This security issue was fixed:
- CVE-2016-3977: Heap buffer overflow in gif2rgb (bsc#974847).
Список пакетов
SUSE Linux Enterprise Server 11 SP4
giflib-4.1.6-21.1
giflib-32bit-4.1.6-21.1
giflib-progs-4.1.6-21.1
giflib-x86-4.1.6-21.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
giflib-4.1.6-21.1
giflib-32bit-4.1.6-21.1
giflib-progs-4.1.6-21.1
giflib-x86-4.1.6-21.1
SUSE Linux Enterprise Software Development Kit 11 SP4
giflib-devel-4.1.6-21.1
giflib-devel-32bit-4.1.6-21.1
Ссылки
- Link for SUSE-SU-2016:1139-1
- E-Mail link for SUSE-SU-2016:1139-1
- SUSE Security Ratings
- SUSE Bug 974847
- SUSE CVE CVE-2016-3977 page
Описание
Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.
Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:giflib-32bit-4.1.6-21.1
SUSE Linux Enterprise Server 11 SP4:giflib-4.1.6-21.1
SUSE Linux Enterprise Server 11 SP4:giflib-progs-4.1.6-21.1
SUSE Linux Enterprise Server 11 SP4:giflib-x86-4.1.6-21.1
Ссылки
- CVE-2016-3977
- SUSE Bug 974847