Medium ELSA-2025-13315 1 CVE

Moderate: gdk-pixbuf2 security update (Oracle Linux 8)

Published Aug 7, 2025 · Updated Aug 7, 2025

Ecosystem: Oracle Linux

Summary

[2.36.12-7]
- Backport fixes for CVE-2025-7345
- Resolves: RHEL-102346

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	gdk-pixbuf2	0:2.36.12-7.el8_10
Oracle Linux · 8	gdk-pixbuf2-devel	0:2.36.12-7.el8_10
Oracle Linux · 8	gdk-pixbuf2-modules	0:2.36.12-7.el8_10
Oracle Linux · 8	gdk-pixbuf2-xlib	0:2.36.12-7.el8_10
Oracle Linux · 8	gdk-pixbuf2-xlib-devel	0:2.36.12-7.el8_10

Vulnerabilities 1

High 7.5

CVE-2025-7345

Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, al…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux

Jul 8, 2025