Advisories » MGASA-2024-0202

Updated gifsicle packages fix security vulnerability

Publication date: 02 Jun 2024
Modification date: 02 Jun 2024
Type: security
Affected Mageia releases : 9
CVE: CVE-2023-46009

Description

gifsicle-1.94 was found to have a floating point exception (FPE)
vulnerability via resize_stream at src/xform.c. (CVE-2023-46009)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=33257
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/XPBVCIDM6CP4OMGHYXCEAOVLORKQFQP4/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46009

SRPMS

9/core

• gifsicle-1.95-1.mga9