[giflib-devel] CVEs reported in giflib 5.1.4

A library and utilities for processing GIFs

Brought to you by: abadger1999, esr

[giflib-devel] CVEs reported in giflib 5.1.4

[giflib-devel] CVEs reported in giflib 5.1.4

From: Todd W. <two...@ya...> - 2022-07-29 15:35:36

There are two CVEs with a severity level of high that don't appear to be resolved: CVE-2020-23922 and CVE-2021-40633
NIST reports that they are related to the following open bugs:
https://sourceforge.net/p/giflib/bugs/151/
https://sourceforge.net/p/giflib/bugs/157/

Are they fixed or any idea on timeline for fixing these vulnerabilities?
Thanks
Todd

View entire thread