ALAS2023-2023-386


Amazon Linux 2023 Security Advisory: ALAS-2023-386
Advisory Release Date: 2023-10-12 16:11 Pacific
Advisory Updated Date: 2023-10-24 15:46 Pacific
Severity: Medium

Issue Overview:

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c. (CVE-2023-39742)


Affected Packages:

giflib


Issue Correction:
Run dnf update giflib --releasever 2023.2.20231018 to update your system.

New Packages:
aarch64:
    giflib-utils-5.2.1-9.amzn2023.0.1.aarch64
    giflib-5.2.1-9.amzn2023.0.1.aarch64
    giflib-debuginfo-5.2.1-9.amzn2023.0.1.aarch64
    giflib-utils-debuginfo-5.2.1-9.amzn2023.0.1.aarch64
    giflib-debugsource-5.2.1-9.amzn2023.0.1.aarch64
    giflib-devel-5.2.1-9.amzn2023.0.1.aarch64

src:
    giflib-5.2.1-9.amzn2023.0.1.src

x86_64:
    giflib-devel-5.2.1-9.amzn2023.0.1.x86_64
    giflib-debugsource-5.2.1-9.amzn2023.0.1.x86_64
    giflib-5.2.1-9.amzn2023.0.1.x86_64
    giflib-utils-debuginfo-5.2.1-9.amzn2023.0.1.x86_64
    giflib-utils-5.2.1-9.amzn2023.0.1.x86_64
    giflib-debuginfo-5.2.1-9.amzn2023.0.1.x86_64