[SECURITY] [DLA 389-1] giflib security update

2016-01-1513:07:29

lists.debian.org

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

59.9%

JSON

Package : giflib
Version : 4.1.6-9+deb6u1
CVE ID : CVE-2015-7555
Debian Bug : 808704

It was discovered that a maliciously crafted GIF can crash the giffix
utility which is part of giflib-tools.

We recommend that you upgrade your giflib-tools package to version
4.1.6-9+deb6u1 (Debian squeeze LTS).

Attachment:
signature.asc
Description: PGP signature

OSVersionArchitecturePackageVersionFilename
Debian6allgiflib< 4.1.6-9+deb6u1giflib_4.1.6-9+deb6u1_all.deb
Debian7s390xlibgif4< 4.1.6-10+deb7u1libgif4_4.1.6-10+deb7u1_s390x.deb
Debian7mipselgiflib-tools< 4.1.6-10+deb7u1giflib-tools_4.1.6-10+deb7u1_mipsel.deb
Debian7mipsellibgif4< 4.1.6-10+deb7u1libgif4_4.1.6-10+deb7u1_mipsel.deb
Debian7i386giflib-dbg< 4.1.6-10+deb7u1giflib-dbg_4.1.6-10+deb7u1_i386.deb
Debian7armellibgif4< 4.1.6-10+deb7u1libgif4_4.1.6-10+deb7u1_armel.deb
Debian8armelgiflib-dbg< 4.1.6-11+deb8u1giflib-dbg_4.1.6-11+deb8u1_armel.deb
Debian8powerpcgiflib-dbg< 4.1.6-11+deb8u1giflib-dbg_4.1.6-11+deb8u1_powerpc.deb
Debian6amd64giflib-tools< 4.1.6-9+deb6u1giflib-tools_4.1.6-9+deb6u1_amd64.deb
Debian7armhfgiflib-tools< 4.1.6-10+deb7u1giflib-tools_4.1.6-10+deb7u1_armhf.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	all	giflib	< 4.1.6-9+deb6u1	giflib_4.1.6-9+deb6u1_all.deb
Debian	7	s390x	libgif4	< 4.1.6-10+deb7u1	libgif4_4.1.6-10+deb7u1_s390x.deb
Debian	7	mipsel	giflib-tools	< 4.1.6-10+deb7u1	giflib-tools_4.1.6-10+deb7u1_mipsel.deb
Debian	7	mipsel	libgif4	< 4.1.6-10+deb7u1	libgif4_4.1.6-10+deb7u1_mipsel.deb
Debian	7	i386	giflib-dbg	< 4.1.6-10+deb7u1	giflib-dbg_4.1.6-10+deb7u1_i386.deb
Debian	7	armel	libgif4	< 4.1.6-10+deb7u1	libgif4_4.1.6-10+deb7u1_armel.deb
Debian	8	armel	giflib-dbg	< 4.1.6-11+deb8u1	giflib-dbg_4.1.6-11+deb8u1_armel.deb
Debian	8	powerpc	giflib-dbg	< 4.1.6-11+deb8u1	giflib-dbg_4.1.6-11+deb8u1_powerpc.deb
Debian	6	amd64	giflib-tools	< 4.1.6-9+deb6u1	giflib-tools_4.1.6-9+deb6u1_amd64.deb
Debian	7	armhf	giflib-tools	< 4.1.6-10+deb7u1	giflib-tools_4.1.6-10+deb7u1_armhf.deb