Branch sisyphus update bulletin.

Package kde4-ktorrent updated to version 4.3.1-alt3 for branch sisyphus in task 146510.

Для работы требуется пересборка пакета

Package libgdk-pixbuf updated to version 2.31.5-alt1 for branch sisyphus in task 146513.

Published: 2015-10-26
Modified: 2025-04-12

CVE-2015-7673

io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file.

Severity: MEDIUM (6.8) Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

References:

VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla

Version: 2.1.2