Red Hat Security AdvisoryRHSA-2023:2216
gdk-pixbuf2 security update
Released 2023-05-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) gdk-pixbuf2-2.42.6-3.el9, gdk-pixbuf2-devel-2.42.6-3.el9, gdk-pixbuf2-modules-2.42.6-3.el9
Fixes 2 records
Priority MEDIUM 42
GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01969 · Published 2022-01-12 · Fixed CWE-787
Priority LOW 35
GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00801 · Published 2022-07-24 · Fixed CWE-190
