UbuntuUpdates.org

Package "gdk-pixbuf"

Name: gdk-pixbuf

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • GDK Pixbuf library - GObject-Introspection
  • GDK Pixbuf library
  • GDK Pixbuf library (development files)
  • GDK Pixbuf library (thumbnailer)
Latest version: 2.42.10+dfsg-3ubuntu3.1
Release: noble (24.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "gdk-pixbuf" in Noble

Repository Area Version
base universe 2.42.10+dfsg-3ubuntu3
base main 2.42.10+dfsg-3ubuntu3
security universe 2.42.10+dfsg-3ubuntu3.1
updates main 2.42.10+dfsg-3ubuntu3.1
updates universe 2.42.10+dfsg-3ubuntu3.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.42.10+dfsg-3ubuntu3.1 2024-06-05 14:07:11 UTC

  gdk-pixbuf (2.42.10+dfsg-3ubuntu3.1) noble-security; urgency=medium

  * SECURITY UPDATE: heap memory corruption
    - debian/patches/CVE-2022-48622-*.patch: adds checks for invalid ani files
      to gdk-pixbuf/io-ani.c.
    - tests/tests-images/fail/CVE-2022-48622.ani: test file.
    - debian/source/include-binaries: including binary test file.
    - CVE-2022-48622

 -- Ian Constantin <email address hidden> Mon, 03 Jun 2024 19:36:10 +0300
CVE-2022-48622 In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk i


About   -   Send Feedback to @ubuntu_updates