gdk-pixbuf: Schwachstelle ermöglicht Offenlegung von Informationen

Summary

Product

Vulnerabilities 1

• Low 3.3
  CVE-2025-6199

  Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder

  A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error res…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jun 17, 2025

Revision history

1. 2026-01-28 #4

   Neue Updates von SUSE aufgenommen

2. 2025-09-28 #3

   Neue Updates von SUSE aufgenommen

3. 2025-09-17 #2

   Neue Updates von SUSE aufgenommen

4. 2025-09-14 #1

   Initiale Fassung

References

• Gnome Gitlab vom 2025-09-14
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/257
• NIST Vulnerability Database vom 2025-09-14
  https://nvd.nist.gov/vuln/detail/cve-2025-6199
• SUSE Security Update SUSE-SU-2025:20694-1 vom 2025-09-17
  https://lists.suse.com/pipermail/sle-security-updates/2025-September/022577.html
• SUSE Security Update SUSE-SU-2025:03373-1 vom 2025-09-26
  https://lists.suse.com/pipermail/sle-security-updates/2025-September/022695.html
• SUSE Security Update SUSE-SU-2025:20748-1 vom 2025-09-26
  https://lists.suse.com/pipermail/sle-security-updates/2025-September/022707.html
• SUSE Security Update SUSE-SU-2026:20156-1 vom 2026-01-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-January/023946.html
• SUSE Security Update SUSE-SU-2026:20128-1 vom 2026-01-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-January/023963.html