UbuntuUpdates.org

Package "gdk-pixbuf-tests"

Name: gdk-pixbuf-tests

Description:

installed tests for the GDK Pixbuf library
Latest version: 2.42.8+dfsg-1ubuntu0.4
Release: jammy (22.04)
Level: updates
Repository: universe
Head package: gdk-pixbuf
Homepage: https://www.gtk.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "gdk-pixbuf-tests"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "gdk-pixbuf-tests" in Jammy

Repository Area Version
base universe 2.42.8+dfsg-1
security universe 2.42.8+dfsg-1ubuntu0.4

Changelog

Version: 2.42.8+dfsg-1ubuntu0.4 2025-07-22 18:06:50 UTC

  gdk-pixbuf (2.42.8+dfsg-1ubuntu0.4) jammy-security; urgency=medium

  * SECURITY UPDATE: Potential memory leak
    - debian/patches/CVE-2025-6199.patch: fix reporting
      of bytes written in decoder in gdk-pixbuf/lzw.c.
    - CVE-2025-6199
  * SECURITY UPDATE: Heap buffer overflow
    - debian/patches/CVE-2025-7345.patch: be more careful
      with chunked icc data in gdk-pixbuf/io-jpeg.c.
    - CVE-2025-7345

 -- Leonidas Da Silva Barbosa <email address hidden> Tue, 15 Jul 2025 07:12:09 -0300
Source diff to previous version
CVE-2025-6199 A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the repor
CVE-2025-7345 A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c)

Version: 2.42.8+dfsg-1ubuntu0.3 2024-06-05 16:07:20 UTC

  gdk-pixbuf (2.42.8+dfsg-1ubuntu0.3) jammy-security; urgency=medium

  * SECURITY UPDATE: heap memory corruption
    - debian/patches/CVE-2022-48622-*.patch: adds checks for invalid ani files
      to gdk-pixbuf/io-ani.c.
    - tests/tests-images/fail/CVE-2022-48622.ani: test file.
    - debian/source/include-binaries: including binary test file.
    - CVE-2022-48622

 -- Ian Constantin <email address hidden> Mon, 03 Jun 2024 19:40:54 +0300
Source diff to previous version
CVE-2022-48622 In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk i

Version: 2.42.8+dfsg-1ubuntu0.2 2022-11-16 03:06:57 UTC

  gdk-pixbuf (2.42.8+dfsg-1ubuntu0.2) jammy; urgency=medium

  * debian/patches/debian_queryloader_dir.patch:
    - fix the directory referenced for gdk-pixbuf-query-loaders
      in the .pc since that file is moved by the packaging (lp: #1993785)

 -- Sebastien Bacher <email address hidden> Fri, 21 Oct 2022 09:26:30 +0200
Source diff to previous version
1993785 Wrong loader path defined in pkgconfig

Version: 2.42.8+dfsg-1ubuntu0.1 2022-09-13 17:07:13 UTC

  gdk-pixbuf (2.42.8+dfsg-1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Heap-Buffer-Overflow
    - debian/patches/CVE-2021-44648-1.patch: Add an assertion that checks for maximum LZW code size
      in gdk-pixbuf/lzw.c.
    - debian/patches/CVE-2021-44648-2.patch: Fix the check for maximum value
      of LZW initial code size in gdk-pixbuf/io-gif.c.
    - debian/patches/CVE-2021-44648-3.patch: Add tests for GIF files with
      invalid LZW code size in tests/tests-images/fail/* and
      tests/tests-images/gif-test-suite/*.
    - debian/source/include-binaries: add tests binaries to the package
    - CVE-2021-44648

 -- Leonidas Da Silva Barbosa <email address hidden> Wed, 07 Sep 2022 11:14:12 -0300
CVE-2021-44648 GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with


About   -   Send Feedback to @ubuntu_updates