========================================================================= Ubuntu Security Notice USN-5969-1 March 23, 2023 gif2apng vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 ESM Summary: Several security issues were fixed in gif2apng. Software Description: - gif2apng: tool for converting animated GIF images to APNG format Details: It was discovered that gif2apng contained multiple heap-base overflows. An attacker could potentially exploit this to cause a denial of service (system crash). (CVE-2021-45909, CVE-2021-45910, CVE-2021-45911) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: gif2apng 1.9+srconly-3ubuntu0.1 Ubuntu 18.04 LTS: gif2apng 1.9+srconly-2ubuntu0.1 Ubuntu 16.04 ESM: gif2apng 1.7-3ubuntu0.1~esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5969-1 CVE-2021-45909, CVE-2021-45910, CVE-2021-45911 Package Information: https://launchpad.net/ubuntu/+source/gif2apng/1.9+srconly-3ubuntu0.1 https://launchpad.net/ubuntu/+source/gif2apng/1.9+srconly-2ubuntu0.1