Most recent entries from all

ALSA-2023:2216 — Moderate: gdk-pixbuf2 security update

Affected: AlmaLinux:9: gdk-pixbuf2, AlmaLinux:9: gdk-pixbuf2-devel, AlmaLinux:9: gdk-pixbuf2-modules

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter.

Security Fix(es):

* gdk-pixbuf: heap-buffer overflow when decoding the lzw compressed stream of image data (CVE-2021-44648) * gdk-pixbuf: heap-based buffer overflow when compositing or clearing frames in GIF files (CVE-2021-46829)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-00075

Withdrawn: BELL-CVE-2021-46829 — CVE-2021-46829 does not affect BellSoft software

Withdrawn by the publisher.

EUVD-2026-34171

fkie_cve-2021-46829

GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.

GHSA-xq3g-5rhc-pxgj

gsd-2021-46829

OESA-2022-1873 — gdk-pixbuf2 security update

Affected: openEuler:20.03-LTS-SP3: gdk-pixbuf2

gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites. Security Fix(es): GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.(CVE-2021-46829)

openSUSE-SU-2024:12222-1 — gdk-pixbuf-devel-2.42.8-2.1 on GA media

gdk-pixbuf-devel-2.42.8-2.1 on GA media

SUSE-SU-2022:2996-1 — Security update for gdk-pixbuf

Security update for gdk-pixbuf

UBUNTU-CVE-2021-46829

Affected: Ubuntu:20.04:LTS: gdk-pixbuf

WID-SEC-W-2023-1185 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.