Re: CVE-2025-31344: giflib: The giflib open-source component has a buffer overflow vulnerability.

[Bernhard Rosenkränzer <bero () lindev ch>]

On Wednesday, April 09, 2025 23:11 CEST, Sebastian Pipping <sebastian () pipping org> wrote:
>    https://github.com/openwrt/packages/issues/26277

Except for https://sourceforge.net/p/giflib/bugs/179/, all the issues seem to be in gif2rgb, which is, according to the 
giflib maintainer, "old and crappy code", and TBH, other than as a no-dependency test tool for giflib, it is fairly 
useless (just use ImageMagick or a similar tool to do the gif to rgb conversion).
Simply removing the gif2rgb tool is probably an acceptable solution.

ttyl
bero