giflib-4.1.6-9.0.1.el7.AXS7

エラータID: AXSA:2025-11108:01

Release date: 
Wednesday, November 26, 2025 - 13:43
Subject: 
giflib-4.1.6-9.0.1.el7.AXS7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

The giflib package contains a shared library of functions for loading and
saving GIF format image files. It is API and ABI compatible with libungif,
the library which supported uncompressed GIFs while the Unisys LZW patent
was in effect.

Security Fix(es):

* CVE-2023-48161: fix Buffer Overflow vulnerability in DumpSCreen2RGB function

CVE(s):
CVE-2023-48161
Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c

Solution: 

Update packages.

CVEs: 
CVE-2023-48161
Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c
Additional Info: 

N/A

Download: 

Asianux Server 7 for x86_64
  1. giflib-4.1.6-9.0.1.el7.AXS7.i686.rpm
    MD5: 95fa4db4679903ea16d96a0095f02723
    SHA-256: bc5b5668824bee867f6807a57f367a5c9d8c90b77b6a1883ec49f6686d88a765
    Size: 39.25 kB
  2. giflib-4.1.6-9.0.1.el7.AXS7.x86_64.rpm
    MD5: a57c234731687e400850d1fdd956b252
    SHA-256: b96ee8a42c1163e01da95180fb7c7cdafd539a1b86a231d10f23b8ba7e693918
    Size: 39.47 kB