Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:2145-1

Опубликовано: 30 июл. 2018
Источник: suse-cvrf

Описание

Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues:

Security issue fixed:

  • CVE-2015-4491: Fix integer multiplication overflow that allows for DoS or potentially RCE (bsc#1053417).

Список пакетов

SUSE Linux Enterprise Desktop 12 SP3
gdk-pixbuf-lang-2.34.0-19.14.2
gdk-pixbuf-query-loaders-2.34.0-19.14.2
gdk-pixbuf-query-loaders-32bit-2.34.0-19.14.2
libgdk_pixbuf-2_0-0-2.34.0-19.14.2
libgdk_pixbuf-2_0-0-32bit-2.34.0-19.14.2
typelib-1_0-GdkPixbuf-2_0-2.34.0-19.14.2
SUSE Linux Enterprise Server 12 SP3
gdk-pixbuf-lang-2.34.0-19.14.2
gdk-pixbuf-query-loaders-2.34.0-19.14.2
gdk-pixbuf-query-loaders-32bit-2.34.0-19.14.2
libgdk_pixbuf-2_0-0-2.34.0-19.14.2
libgdk_pixbuf-2_0-0-32bit-2.34.0-19.14.2
typelib-1_0-GdkPixbuf-2_0-2.34.0-19.14.2
SUSE Linux Enterprise Server for SAP Applications 12 SP3
gdk-pixbuf-lang-2.34.0-19.14.2
gdk-pixbuf-query-loaders-2.34.0-19.14.2
gdk-pixbuf-query-loaders-32bit-2.34.0-19.14.2
libgdk_pixbuf-2_0-0-2.34.0-19.14.2
libgdk_pixbuf-2_0-0-32bit-2.34.0-19.14.2
typelib-1_0-GdkPixbuf-2_0-2.34.0-19.14.2
SUSE Linux Enterprise Software Development Kit 12 SP3
gdk-pixbuf-devel-2.34.0-19.14.2

Ссылки

Описание

Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that are mishandled during scaling.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:gdk-pixbuf-lang-2.34.0-19.14.2
SUSE Linux Enterprise Desktop 12 SP3:gdk-pixbuf-query-loaders-2.34.0-19.14.2
SUSE Linux Enterprise Desktop 12 SP3:gdk-pixbuf-query-loaders-32bit-2.34.0-19.14.2
SUSE Linux Enterprise Desktop 12 SP3:libgdk_pixbuf-2_0-0-2.34.0-19.14.2
Ссылки