ALT-PU-2015-1808-1
Package libgdk-pixbuf updated to version 2.32.1-alt1 for branch sisyphus in task 150403.
Closed vulnerabilities
Published: 2015-10-26
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2015-7674
Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow.
Severity: MEDIUM (6.8)
References:
- http://ftp.gnome.org/pub/gnome/sources/gdk-pixbuf/2.32/gdk-pixbuf-2.32.1.news
- http://ftp.gnome.org/pub/gnome/sources/gdk-pixbuf/2.32/gdk-pixbuf-2.32.1.news
- openSUSE-SU-2016:0897
- openSUSE-SU-2016:0897
- openSUSE-SU-2016:1467
- openSUSE-SU-2016:1467
- DSA-3378
- DSA-3378
- [oss-security] 20151001 CVE request: Heap overflow with a gif file in gdk-pixbuf < 2.32.1
- [oss-security] 20151001 CVE request: Heap overflow with a gif file in gdk-pixbuf < 2.32.1
- [oss-security] 20151001 Re: CVE request: Heap overflow with a gif file in gdk-pixbuf < 2.32.1
- [oss-security] 20151001 Re: CVE request: Heap overflow with a gif file in gdk-pixbuf < 2.32.1
- [oss-security] 20151002 Re: CVE request: Heap overflow with a gif file in gdk-pixbuf < 2.32.1
- [oss-security] 20151002 Re: CVE request: Heap overflow with a gif file in gdk-pixbuf < 2.32.1
- [oss-security] 20151005 Re: CVE request: Heap overflow with a gif file in gdk-pixbuf < 2.32.1
- [oss-security] 20151005 Re: CVE request: Heap overflow with a gif file in gdk-pixbuf < 2.32.1
- 76955
- 76955
- USN-2767-1
- USN-2767-1
- https://git.gnome.org/browse/gdk-pixbuf/commit/?id=e9a5704edaa9aee9498f1fbf6e1b70fcce2e55aa
- https://git.gnome.org/browse/gdk-pixbuf/commit/?id=e9a5704edaa9aee9498f1fbf6e1b70fcce2e55aa
- GLSA-201512-05
- GLSA-201512-05