Security update for gdk-pixbuf

2024-06-1903:32:59

Google

osv.dev

gdk-pixbuf

heap memory corruption

image loaders

security update

software fix

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

Confidence

Low

This update for gdk-pixbuf fixes the following issues:

gdk-pixbuf was updated to version 2.42.12:

Security issues fixed:
- CVE-2022-48622: Fixed heap memory corruption on gdk-pixbuf (bsc#1219276)
Changes in version 2.42.12:
- ani: Reject files with multiple INA or IART chunks,
- ani: validate chunk size,
- Updated translations.
Enable other image loaders such as xpm and xbm (bsc#1223903)
Changes in version 2.42.11:
- Disable fringe loaders by default.
- Introspection fixes.
- Updated translations.
Changes in version 2.42.10:
- Search for rst2man.py.
- Update the memory size limit for JPEG images.
- Updated translations.
Fixed loading of larger images
Avoid Bash specific syntax in baselibs postscript (bsc#1195391)