libungif security update

2005-11-0319:24:03

CentOS Project

lists.centos.org

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.033 Low

EPSS

Percentile

91.4%

JSON

CentOS Errata and Security Advisory CESA-2005:828

The libungif package contains a shared library of functions for loading and
saving GIF format image files.

Several bugs in the way libungif decodes GIF images were discovered. An
attacker could create a carefully crafted GIF image file in such a way that
it could cause an application linked with libungif to crash or execute
arbitrary code when the file is opened by a victim. The Common
Vulnerabilities and Exposures project has assigned the names CVE-2005-2974
and CVE-2005-3350 to these issues.

All users of libungif are advised to upgrade to these updated packages,
which contain backported patches that resolve these issues.

Affected packages:
libungif
libungif-devel
libungif-progs

Upstream details at:
https://access.redhat.com/errata/RHSA-2005:828

OSVersionArchitecturePackageVersionFilename
CentOS4ia64libungif< 4.1.3-1.el4.2libungif-4.1.3-1.el4.2.ia64.rpm
CentOS4ia64libungif-devel< 4.1.3-1.el4.2libungif-devel-4.1.3-1.el4.2.ia64.rpm
CentOS4ia64libungif-progs< 4.1.3-1.el4.2libungif-progs-4.1.3-1.el4.2.ia64.rpm
CentOS3ia64libungif< 4.1.0-15.el3.3libungif-4.1.0-15.el3.3.ia64.rpm
CentOS3ia64libungif-devel< 4.1.0-15.el3.3libungif-devel-4.1.0-15.el3.3.ia64.rpm
CentOS3ia64libungif-progs< 4.1.0-15.el3.3libungif-progs-4.1.0-15.el3.3.ia64.rpm
CentOS4alphalibungif< 4.1.3-1.el4.2libungif-4.1.3-1.el4.2.alpha.rpm
CentOS4alphalibungif-devel< 4.1.3-1.el4.2libungif-devel-4.1.3-1.el4.2.alpha.rpm
CentOS4alphalibungif-progs< 4.1.3-1.el4.2libungif-progs-4.1.3-1.el4.2.alpha.rpm
CentOS4s390libungif< 4.1.3-1.el4.2libungif-4.1.3-1.el4.2.s390.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	4	ia64	libungif	< 4.1.3-1.el4.2	libungif-4.1.3-1.el4.2.ia64.rpm
CentOS	4	ia64	libungif-devel	< 4.1.3-1.el4.2	libungif-devel-4.1.3-1.el4.2.ia64.rpm
CentOS	4	ia64	libungif-progs	< 4.1.3-1.el4.2	libungif-progs-4.1.3-1.el4.2.ia64.rpm
CentOS	3	ia64	libungif	< 4.1.0-15.el3.3	libungif-4.1.0-15.el3.3.ia64.rpm
CentOS	3	ia64	libungif-devel	< 4.1.0-15.el3.3	libungif-devel-4.1.0-15.el3.3.ia64.rpm
CentOS	3	ia64	libungif-progs	< 4.1.0-15.el3.3	libungif-progs-4.1.0-15.el3.3.ia64.rpm
CentOS	4	alpha	libungif	< 4.1.3-1.el4.2	libungif-4.1.3-1.el4.2.alpha.rpm
CentOS	4	alpha	libungif-devel	< 4.1.3-1.el4.2	libungif-devel-4.1.3-1.el4.2.alpha.rpm
CentOS	4	alpha	libungif-progs	< 4.1.3-1.el4.2	libungif-progs-4.1.3-1.el4.2.alpha.rpm
CentOS	4	s390	libungif	< 4.1.3-1.el4.2	libungif-4.1.3-1.el4.2.s390.rpm