Advisory ROSA-SA-2024-2434

Software: giflib 5.2.1
OS: ROSA-CHROME

package_evr_string: giflib-5.2.1-4

CVE-ID: CVE-2023-39742
BDU-ID: 2023-05863
CVE-Crit: MEDIUM
CVE-DESC.: A vulnerability in the getarg.c component of the GIFLIB library for handling GIF files is related to a segmentation error. Exploitation of the vulnerability could allow an attacker to cause a denial of service
CVE-STATUS: Fixed
CVE-REV: To close, run command: sudo dnf update giflib

CVE-ID: CVE-2022-28506
BDU-ID: 2023-05862
CVE-Crit: MEDIUM
CVE-DESC.: A vulnerability in the DumpScreen2RGB() (gif2rgb.c) function of the GIF file handling library GIFLIB is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability may allow a remote intruder to gain unauthorized access to protected information
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update giflib