Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-31344: NOTE: https://www.openwall.com/lists/oss-security/2025/04/07/3 NOTE: https://sourceforge.net/p/giflib/bugs/176/ CVE-2024-45993: Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb. CVE-2023-48161: Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | giflib | 0:5.2.1-9.amzn2023.0.2 |
| Amazon Linux · 2023 | giflib-debuginfo | 0:5.2.1-9.amzn2023.0.2 |
| Amazon Linux · 2023 | giflib-debugsource | 0:5.2.1-9.amzn2023.0.2 |
| Amazon Linux · 2023 | giflib-devel | 0:5.2.1-9.amzn2023.0.2 |
| Amazon Linux · 2023 | giflib-utils | 0:5.2.1-9.amzn2023.0.2 |
| Amazon Linux · 2023 | giflib-utils-debuginfo | 0:5.2.1-9.amzn2023.0.2 |
Vulnerabilities 3
-
High 7.3
The giflib open-source component has a buffer overflow vulnerability
Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2.
-
Medium 6.5
Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb.
-
Unscored —
Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information …