diff --git a/CVE-2023-48161.patch b/CVE-2023-48161.patch new file mode 100644 index 0000000000000000000000000000000000000000..ea94daae4e9893459742905bd30d01412002e5cc --- /dev/null +++ b/CVE-2023-48161.patch @@ -0,0 +1,30 @@ +From 9c38f610bbfc3077b917ecd63eb4499eaf8d889d Mon Sep 17 00:00:00 2001 +From: zhang-liang-pengkun +Date: Wed, 3 Jan 2024 16:42:01 +0800 +Subject: [PATCH] 3 + +--- + gif2rgb.c | 7 ++++++- + 1 file changed, 6 insertions(+), 1 deletion(-) + +diff --git a/gif2rgb.c b/gif2rgb.c +index 8d7c0ff..7a001a9 100644 +--- a/gif2rgb.c ++++ b/gif2rgb.c +@@ -317,7 +317,12 @@ static void DumpScreen2RGB(char *FileName, int OneFileFlag, + GifRow = ScreenBuffer[i]; + GifQprintf("\b\b\b\b%-4d", ScreenHeight - i); + for (j = 0; j < ScreenWidth; j++) { +- ColorMapEntry = &ColorMap->Colors[GifRow[j]]; ++ /*check if color is within color palete */ ++ if (GifRow[j] >= ColorMap->ColorCount) ++ { ++ GIF_EXIT(GifErrorString(D_GIF_ERR_IMAGE_DEFECT)); ++ } ++ ColorMapEntry = &ColorMap->Colors[GifRow[j]]; + Buffers[0][j] = ColorMapEntry->Red; + Buffers[1][j] = ColorMapEntry->Green; + Buffers[2][j] = ColorMapEntry->Blue; +-- +2.39.0.windows.2 + diff --git a/giflib.spec b/giflib.spec index 38d5b85c200e594408d70f44c03ada8b7a8ff453..dffdf8e243ae7389f75c29f7359cc40921533a7a 100644 --- a/giflib.spec +++ b/giflib.spec @@ -1,6 +1,6 @@ Name: giflib Version: 5.2.1 -Release: 4 +Release: 5 Summary: A library and utilities for processing GIFs License: MIT URL: http://www.sourceforge.net/projects/giflib/ @@ -11,6 +11,7 @@ Patch6002: giflib_coverity.patch Patch6003: giflib_html-docs-consistent-ids.patch Patch6004: CVE-2022-28506.patch Patch6005: CVE-2023-39742.patch +Patch6006: CVE-2023-48161.patch BuildRequires: make xmlto gcc provides: giflib-utils = %{name}-%{version} @@ -68,6 +69,9 @@ rm -f %{buildroot}%{_libdir}/libgif.a %{_bindir}/gif* %changelog +* Wed Jan 03 2024 zhangliangpengkun - 5.2.1-5 +- Fix CVE-2023-48161 + * Fri Sep 15 2023 Funda Wang - 5.2.1-4 - Fix CVE-2023-39742