openSUSE Security Update : gdk-pixbuf (openSUSE-2016-1071)

Medium Nessus Plugin ID 93434


The remote openSUSE host is missing a security update.


gdk-pixbuf was updated to 2.32.3 to fix the following issues :

Update to version 2.32.3 :

+ Fix two crashes in the bmp loader (bgo#747605, bgo#758991)

+ ico: integer overflow fixes

+ Avoid some integer overflow possibilities in scaling code

+ Make relocations optional

+ Fix a crash due to overflow when scaling

+ Drop loaders for some rare image formats: wbmp, ras, pcx

+ Prevent testsuite failures due to lack of memory

+ Fix animation loading (bgo#755269)

+ More overflow fixes in the scaling code (bgo#754387)

+ Fix a crash in the tga loader

+ Fix several integer overflows (bgo#753908, bgo#753569)

+ Port animations to GTask

+ Translation updates

- Add fixes for some crashes, taken from upstream git (boo#988745 boo#991450 CVE-2016-6352) :


Update the affected gdk-pixbuf packages.

See Also

Plugin Details

Severity: Medium

ID: 93434

File Name: openSUSE-2016-1071.nasl

Version: $Revision: 2.3 $

Type: local

Agent: unix

Published: 2016/09/12

Modified: 2016/10/13

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P


Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:gdk-pixbuf-debugsource, p-cpe:/a:novell:opensuse:gdk-pixbuf-devel, p-cpe:/a:novell:opensuse:gdk-pixbuf-devel-32bit, p-cpe:/a:novell:opensuse:gdk-pixbuf-devel-debuginfo, p-cpe:/a:novell:opensuse:gdk-pixbuf-devel-debuginfo-32bit, p-cpe:/a:novell:opensuse:gdk-pixbuf-lang, p-cpe:/a:novell:opensuse:gdk-pixbuf-query-loaders, p-cpe:/a:novell:opensuse:gdk-pixbuf-query-loaders-32bit, p-cpe:/a:novell:opensuse:gdk-pixbuf-query-loaders-debuginfo, p-cpe:/a:novell:opensuse:gdk-pixbuf-query-loaders-debuginfo-32bit, p-cpe:/a:novell:opensuse:libgdk_pixbuf-2_0-0, p-cpe:/a:novell:opensuse:libgdk_pixbuf-2_0-0-32bit, p-cpe:/a:novell:opensuse:libgdk_pixbuf-2_0-0-debuginfo, p-cpe:/a:novell:opensuse:libgdk_pixbuf-2_0-0-debuginfo-32bit, p-cpe:/a:novell:opensuse:typelib-1_0-GdkPixbuf-2_0, cpe:/o:novell:opensuse:13.2, cpe:/o:novell:opensuse:42.1

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 2016/09/09

Reference Information

CVE: CVE-2016-6352