MGASA-2018-0280

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2018-0280.html
Import Source
https://advisories.mageia.org/MGASA-2018-0280.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2018-0280
Upstream
Published
2018-06-14T18:14:36Z
Modified
2026-04-16T06:26:00Z
Summary
Updated gifsicle package fixes security vulnerability
Details

Updated gifsicle package fixes security vulnerability:

A double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker to cause a denial-of-service attack or unspecified other impact via a maliciously crafted file, because last_name is mishandled (CVE-2017-18120).

References
Credits

Affected packages

Mageia:6 / gifsicle

Package

Name
gifsicle
Purl
pkg:rpm/mageia/gifsicle?arch=source&distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.88-1.2.mga6

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2018-0280.json"