giflib: several vulnerabilities

Package(s):

giflib

CVE #(s):

CVE-2005-2974 CVE-2005-3350

Created:

May 19, 2009

Updated:

June 18, 2009

Description:

From the Fedora advisory: CVE-2005-2974: NULL pointer dereference crash. CVE-2005-3350: Memory corruption via a crafted GIF

Alerts:

Fedora	FEDORA-2009-4848	giflib	2009-05-12
Red Hat	RHSA-2009:0444-01	giflib	2009-04-22
Fedora	FEDORA-2009-5118	giflib	2009-05-19

giflib: several vulnerabilities

Posted May 22, 2009 15:52 UTC (Fri) by zero79 (guest, #57109) [Link]

should these really fall under "new vulnerabilities"? these are CVE-2005-XXXX issues. someone
should write a story about how long it took to fix these and what went so horribly wrong that they
finally got fixed now four years later by redhat. note that debian fixed these in 2005.

giflib: several vulnerabilities

Posted May 26, 2009 10:10 UTC (Tue) by mjcox@redhat.com (guest, #31775) [Link]

For details see
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2005-3350#c7