DSA-4088-1 gdk-pixbuf -- security update

Related Vulnerabilities: CVE-2017-1000422   CVE-2017-6312   CVE-2017-6313   CVE-2017-6314  

It was discovered that multiple integer overflows in the GIF image loader in the GDK Pixbuf library may result in denial of service and potentially the execution of arbitrary code if a malformed image file is opened. For the oldstable distribution (jessie), this problem has been fixed in version 2.31.1-2+deb8u7. For the stable distribution (stretch), this problem has been fixed in version 2.36.5-2+deb9u2. In addition this update provides fixes for CVE-2017-6312, CVE-2017-6313 and CVE-2017-6314. We recommend that you upgrade your gdk-pixbuf packages. For the detailed security status of gdk-pixbuf please refer to its security tracker page at: https://security-tracker.debian.org/tracker/gdk-pixbuf

Debian Security Advisory

DSA-4088-1 gdk-pixbuf -- security update

Date Reported:
15 Jan 2018
Affected Packages:
gdk-pixbuf
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2017-1000422.
More information:

It was discovered that multiple integer overflows in the GIF image loader in the GDK Pixbuf library may result in denial of service and potentially the execution of arbitrary code if a malformed image file is opened.

For the oldstable distribution (jessie), this problem has been fixed in version 2.31.1-2+deb8u7.

For the stable distribution (stretch), this problem has been fixed in version 2.36.5-2+deb9u2. In addition this update provides fixes for CVE-2017-6312, CVE-2017-6313 and CVE-2017-6314.

We recommend that you upgrade your gdk-pixbuf packages.

For the detailed security status of gdk-pixbuf please refer to its security tracker page at: https://security-tracker.debian.org/tracker/gdk-pixbuf