Summary
[2.42.12-4]
- jpeg: Be more careful with chunked icc data
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | gdk-pixbuf2 | 0:2.42.12-4.el10_0 |
| Oracle Linux · 10 | gdk-pixbuf2-devel | 0:2.42.12-4.el10_0 |
| Oracle Linux · 10 | gdk-pixbuf2-modules | 0:2.42.12-4.el10_0 |
Vulnerabilities 1
-
High 7.5
Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf
A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, al…