Описание
Security update for giflib
giflib was updated to fix one security issue.
This security issue was fixed:
- CVE-2016-3977: Heap buffer overflow in gif2rgb (bsc#974847).
Список пакетов
SUSE Linux Enterprise Desktop 12
libgif6-5.0.5-12.1
libgif6-32bit-5.0.5-12.1
SUSE Linux Enterprise Desktop 12 SP1
libgif6-5.0.5-12.1
libgif6-32bit-5.0.5-12.1
SUSE Linux Enterprise Server 12
giflib-progs-5.0.5-12.1
libgif6-5.0.5-12.1
libgif6-32bit-5.0.5-12.1
SUSE Linux Enterprise Server 12 SP1
giflib-progs-5.0.5-12.1
libgif6-5.0.5-12.1
libgif6-32bit-5.0.5-12.1
SUSE Linux Enterprise Server for SAP Applications 12
giflib-progs-5.0.5-12.1
libgif6-5.0.5-12.1
libgif6-32bit-5.0.5-12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
giflib-progs-5.0.5-12.1
libgif6-5.0.5-12.1
libgif6-32bit-5.0.5-12.1
SUSE Linux Enterprise Software Development Kit 12
giflib-devel-5.0.5-12.1
SUSE Linux Enterprise Software Development Kit 12 SP1
giflib-devel-5.0.5-12.1
Ссылки
- Link for SUSE-SU-2016:1140-1
- E-Mail link for SUSE-SU-2016:1140-1
- SUSE Security Ratings
- SUSE Bug 974847
- SUSE CVE CVE-2016-3977 page
Описание
Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libgif6-32bit-5.0.5-12.1
SUSE Linux Enterprise Desktop 12 SP1:libgif6-5.0.5-12.1
SUSE Linux Enterprise Desktop 12:libgif6-32bit-5.0.5-12.1
SUSE Linux Enterprise Desktop 12:libgif6-5.0.5-12.1
Ссылки
- CVE-2016-3977
- SUSE Bug 974847