Red Hat Security AdvisoryRHSA-2024:3341
gdk-pixbuf2 security update
Released 2024-05-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) gdk-pixbuf2-devel-2.36.12-6.el8_10, gdk-pixbuf2-modules-2.36.12-6.el8_10
- Red Hat Enterprise Linux BaseOS (v. 8) gdk-pixbuf2-2.36.12-6.el8_10
- Red Hat Enterprise Linux CRB (v. 8) gdk-pixbuf2-xlib-2.36.12-6.el8_10, gdk-pixbuf2-xlib-devel-2.36.12-6.el8_10
Fixes 1 record
Priority HIGH 69
In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00415 · Published 2024-01-26 · Partial fix CWE-787
