Red Hat Security Advisory

RHSA-2024:3834

gdk-pixbuf2 security update

Released 2024-06-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) gdk-pixbuf2-2.42.6-4.el9_4, gdk-pixbuf2-devel-2.42.6-4.el9_4, gdk-pixbuf2-modules-2.42.6-4.el9_4

Fixes 1 record

TI-2022-24154 CVE-2022-48622 · GHSA-2pj9-xmx5-6fv3

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor)…

HIGH 69

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00415 Published 2024-01-26 Partial fix CWE-787