ALT-PU-2016-2041-1
Package libgdk-pixbuf updated to version 2.36.0-alt1 for branch sisyphus in task 169832.
Closed vulnerabilities
Published: 2016-10-03
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2016-6352
The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an ICO file.
Severity: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- openSUSE-SU-2016:2276
- openSUSE-SU-2016:2276
- [oss-security] 20160713 CVE Request: Write out-of-bounds in gdk-pixbuf 2.30.7
- [oss-security] 20160713 CVE Request: Write out-of-bounds in gdk-pixbuf 2.30.7
- [oss-security] 20160726 Re: CVE Request: Write out-of-bounds in gdk-pixbuf 2.30.7
- [oss-security] 20160726 Re: CVE Request: Write out-of-bounds in gdk-pixbuf 2.30.7
- USN-3085-1
- USN-3085-1
- https://bugzilla.gnome.org/show_bug.cgi?id=769170
- https://bugzilla.gnome.org/show_bug.cgi?id=769170
- https://git.gnome.org/browse/gdk-pixbuf/commit/?id=88af50a864195da1a4f7bda5f02539704fbda599
- https://git.gnome.org/browse/gdk-pixbuf/commit/?id=88af50a864195da1a4f7bda5f02539704fbda599
- https://git.gnome.org/browse/gdk-pixbuf/tree/NEWS?id=640134c46221689d263369872937192e4484c83b
- https://git.gnome.org/browse/gdk-pixbuf/tree/NEWS?id=640134c46221689d263369872937192e4484c83b
- [debian-lts-announce] 20191219 [SECURITY] [DLA 2043-1] gdk-pixbuf security update
- [debian-lts-announce] 20191219 [SECURITY] [DLA 2043-1] gdk-pixbuf security update