Most recent entries from all

ALSA-2023:2216 — Moderate: gdk-pixbuf2 security update

Affected: AlmaLinux:9: gdk-pixbuf2, AlmaLinux:9: gdk-pixbuf2-devel, AlmaLinux:9: gdk-pixbuf2-modules

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter.

Security Fix(es):

* gdk-pixbuf: heap-buffer overflow when decoding the lzw compressed stream of image data (CVE-2021-44648) * gdk-pixbuf: heap-based buffer overflow when compositing or clearing frames in GIF files (CVE-2021-46829)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-01698

Withdrawn: BELL-CVE-2021-44648 — CVE-2021-44648 does not affect BellSoft software

Withdrawn by the publisher.

EUVD-2026-32996

fkie_cve-2021-44648

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.

GHSA-hm7g-c3p8-8xwf

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.

gsd-2021-44648

openSUSE-SU-2024:12296-1 — gdk-pixbuf-devel-2.42.9-3.1 on GA media

gdk-pixbuf-devel-2.42.9-3.1 on GA media

SUSE-SU-2022:3230-1 — Security update for gdk-pixbuf

Security update for gdk-pixbuf

UBUNTU-CVE-2021-44648

Affected: Ubuntu:20.04:LTS: gdk-pixbuf, Ubuntu:22.04:LTS: gdk-pixbuf

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.

WID-SEC-W-2023-1185 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.