SUSE-SU-2022:2996-1

Опубликовано: 02 сент. 2022

Источник: suse-cvrf

Описание

Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues:

CVE-2021-46829: Fixed overflow when compositing or clearing frames (bsc#1201826).

Список пакетов

Image SLES15-SP2-SAP-Azure

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP2-SAP-BYOS-Azure

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP2-SAP-BYOS-GCE

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP2-SAP-EC2-HVM

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP2-SAP-GCE

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP3-SAP-BYOS-Azure

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP3-SAP-BYOS-GCE

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP3-SAPCAL-Azure

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP3-SAPCAL-EC2-HVM

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP3-SAPCAL-GCE

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

SUSE Linux Enterprise Micro 5.2

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP3

gdk-pixbuf-devel-2.40.0-150200.3.6.1

gdk-pixbuf-lang-2.40.0-150200.3.6.1

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

gdk-pixbuf-thumbnailer-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1

typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.6.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP3

gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.6.1

openSUSE Leap 15.3

gdk-pixbuf-devel-2.40.0-150200.3.6.1

gdk-pixbuf-devel-32bit-2.40.0-150200.3.6.1

gdk-pixbuf-lang-2.40.0-150200.3.6.1

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.6.1

gdk-pixbuf-thumbnailer-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.6.1

typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1

typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.6.1

openSUSE Leap Micro 5.2

gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20222996-1/
Link for SUSE-SU-2022:2996-1
https://lists.suse.com/pipermail/sle-security-updates/2022-September/012066.html
E-Mail link for SUSE-SU-2022:2996-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1201826
SUSE Bug 1201826
https://www.suse.com/security/cve/CVE-2021-46829/
SUSE CVE CVE-2021-46829 page

Описание

GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.

Затронутые продукты

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-46829.html
CVE-2021-46829
https://bugzilla.suse.com/1201826
SUSE Bug 1201826

SUSE-SU-2022:2996-1

Описание

Список пакетов

Image SLES15-SP2-SAP-Azure

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-BYOS-Azure

Image SLES15-SP2-SAP-BYOS-EC2-HVM

Image SLES15-SP2-SAP-BYOS-GCE

Image SLES15-SP2-SAP-EC2-HVM

Image SLES15-SP2-SAP-GCE

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-BYOS-Azure

Image SLES15-SP3-SAP-BYOS-EC2-HVM

Image SLES15-SP3-SAP-BYOS-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Module for Basesystem 15 SP3

SUSE Linux Enterprise Module for Desktop Applications 15 SP3

openSUSE Leap 15.3

openSUSE Leap Micro 5.2

Ссылки

Уязвимость: CVE-2021-46829

Описание

Затронутые продукты

Ссылки