CVE-2022-1507 (https://github.com/hpjansson/chafa/commit/e4b777c7b7c144cd16a0ea96108267b1004fe6c9): chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in GitHub repository hpjansson/chafa prior to 1.10.2. chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. Please stabilize 1.10.2.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=30b1bd64f799dc229c78cee52ea486e4b2ff6e23 commit 30b1bd64f799dc229c78cee52ea486e4b2ff6e23 Author: Jakov Smolić <jsmolic@gentoo.org> AuthorDate: 2022-05-05 08:46:05 +0000 Commit: Jakov Smolić <jsmolic@gentoo.org> CommitDate: 2022-05-05 09:50:20 +0000 media-gfx/chafa: drop 1.8.0 Bug: https://bugs.gentoo.org/841881 Signed-off-by: Jakov Smolić <jsmolic@gentoo.org> media-gfx/chafa/Manifest | 1 - media-gfx/chafa/chafa-1.8.0.ebuild | 36 ------------------------------------ 2 files changed, 37 deletions(-)
Thanks!