[ GLSA 201709-08 ] GDK-PixBuf

[GLSA]

Gentoo Linux Security Advisory

Title: GDK-PixBuf: Multiple vulnerabilities (GLSA 201709-08)
Severity: normal
Exploitable: remote
Date: 2017-09-17
Bug(s): #592976, #611390, #630026
ID: 201709-08

Synopsis

Multiple vulnerabilities have been found in GDK-PixBuf, the worst
of which could result in the execution of arbitrary code.


Background

GDK-PixBuf is an image loading library for GTK+.

Affected Packages

Package: x11-libs/gdk-pixbuf
Vulnerable: < 2.36.9
Unaffected: >= 2.36.9
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in GDK-PixBuf. Please
review the referenced CVE identifiers for details.


Impact

A remote attacker, by sending a specially crafted TIFF, JPEG, or URL,
could execute arbitrary code with the privileges of the process or cause
a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All GDK-PixBuf users should upgrade to the latest version: