Security update for gtk2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:2470-1 Final 1 1 2018-08-21T12:55:58Z current 2018-08-21T12:55:58Z 2018-08-21T12:55:58Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for gtk2 This update for gtk2 provides the following fixes: These security issues were fixed: - CVE-2017-6312: Prevent integer overflow that allowed context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file (bsc#1027026). - CVE-2017-6314: The make_available_at_least function allowed context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file (bsc#1027025). - CVE-2017-6313: Prevent integer underflow in the load_resources function that allowed context-dependent attackers to cause a denial of service (out-of-bounds read and program crash) via a crafted image entry size in an ICO file (bsc#1027024). - CVE-2017-2862: Prevent heap overflow in the gdk_pixbuf__jpeg_image_load_increment function. A specially crafted jpeg file could have caused a heap overflow resulting in remote code execution (bsc#1048289) - CVE-2017-2870: Prevent integer overflow in the tiff_image_parse functionality. A specially crafted tiff file could have caused a heap-overflow resulting in remote code execution (bsc#1048544). This non-security issue was fixed: - Prevent an infinite loop when a window is destroyed while traversed (bsc#1039465). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-gtk2-13748,slessp4-gtk2-13748 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20182470-1/ Link for SUSE-SU-2018:2470-1 https://lists.suse.com/pipermail/sle-security-updates/2018-August/004484.html E-Mail link for SUSE-SU-2018:2470-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1027024 SUSE Bug 1027024 https://bugzilla.suse.com/1027025 SUSE Bug 1027025 https://bugzilla.suse.com/1027026 SUSE Bug 1027026 https://bugzilla.suse.com/1039465 SUSE Bug 1039465 https://bugzilla.suse.com/1048289 SUSE Bug 1048289 https://bugzilla.suse.com/1048544 SUSE Bug 1048544 https://www.suse.com/security/cve/CVE-2017-2862/ SUSE CVE CVE-2017-2862 page https://www.suse.com/security/cve/CVE-2017-2870/ SUSE CVE CVE-2017-2870 page https://www.suse.com/security/cve/CVE-2017-6312/ SUSE CVE CVE-2017-6312 page https://www.suse.com/security/cve/CVE-2017-6313/ SUSE CVE CVE-2017-6313 page https://www.suse.com/security/cve/CVE-2017-6314/ SUSE CVE CVE-2017-6314 page SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 gtk2-devel-2.18.9-0.45.8.1 gtk2-devel-32bit-2.18.9-0.45.8.1 gtk2-2.18.9-0.45.8.1 gtk2-32bit-2.18.9-0.45.8.1 gtk2-doc-2.18.9-0.45.8.1 gtk2-lang-2.18.9-0.45.8.1 gtk2-x86-2.18.9-0.45.8.1 gtk2-2.18.9-0.45.8.1 as a component of SUSE Linux Enterprise Server 11 SP4 gtk2-32bit-2.18.9-0.45.8.1 as a component of SUSE Linux Enterprise Server 11 SP4 gtk2-doc-2.18.9-0.45.8.1 as a component of SUSE Linux Enterprise Server 11 SP4 gtk2-lang-2.18.9-0.45.8.1 as a component of SUSE Linux Enterprise Server 11 SP4 gtk2-x86-2.18.9-0.45.8.1 as a component of SUSE Linux Enterprise Server 11 SP4 gtk2-2.18.9-0.45.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 gtk2-32bit-2.18.9-0.45.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 gtk2-doc-2.18.9-0.45.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 gtk2-lang-2.18.9-0.45.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 gtk2-x86-2.18.9-0.45.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 gtk2-devel-2.18.9-0.45.8.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 gtk2-devel-32bit-2.18.9-0.45.8.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability. CVE-2017-2862 SUSE Linux Enterprise Server 11 SP4:gtk2-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-32bit-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-doc-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-lang-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-x86-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-32bit-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-doc-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-lang-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-x86-2.18.9-0.45.8.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-2.18.9-0.45.8.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-32bit-2.18.9-0.45.8.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182470-1/ https://www.suse.com/security/cve/CVE-2017-2862.html CVE-2017-2862 https://bugzilla.suse.com/1048289 SUSE Bug 1048289 An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability. CVE-2017-2870 SUSE Linux Enterprise Server 11 SP4:gtk2-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-32bit-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-doc-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-lang-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-x86-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-32bit-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-doc-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-lang-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-x86-2.18.9-0.45.8.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-2.18.9-0.45.8.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-32bit-2.18.9-0.45.8.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182470-1/ https://www.suse.com/security/cve/CVE-2017-2870.html CVE-2017-2870 https://bugzilla.suse.com/1048289 SUSE Bug 1048289 https://bugzilla.suse.com/1048544 SUSE Bug 1048544 Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations. CVE-2017-6312 SUSE Linux Enterprise Server 11 SP4:gtk2-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-32bit-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-doc-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-lang-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-x86-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-32bit-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-doc-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-lang-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-x86-2.18.9-0.45.8.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-2.18.9-0.45.8.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-32bit-2.18.9-0.45.8.1 low 1.9 AV:L/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182470-1/ https://www.suse.com/security/cve/CVE-2017-6312.html CVE-2017-6312 https://bugzilla.suse.com/1027024 SUSE Bug 1027024 https://bugzilla.suse.com/1027026 SUSE Bug 1027026 Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (out-of-bounds read and program crash) via a crafted image entry size in an ICO file. CVE-2017-6313 SUSE Linux Enterprise Server 11 SP4:gtk2-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-32bit-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-doc-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-lang-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-x86-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-32bit-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-doc-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-lang-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-x86-2.18.9-0.45.8.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-2.18.9-0.45.8.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-32bit-2.18.9-0.45.8.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182470-1/ https://www.suse.com/security/cve/CVE-2017-6313.html CVE-2017-6313 https://bugzilla.suse.com/1027024 SUSE Bug 1027024 The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file. CVE-2017-6314 SUSE Linux Enterprise Server 11 SP4:gtk2-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-32bit-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-doc-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-lang-2.18.9-0.45.8.1 SUSE Linux Enterprise Server 11 SP4:gtk2-x86-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-32bit-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-doc-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-lang-2.18.9-0.45.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-x86-2.18.9-0.45.8.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-2.18.9-0.45.8.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-32bit-2.18.9-0.45.8.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182470-1/ https://www.suse.com/security/cve/CVE-2017-6314.html CVE-2017-6314 https://bugzilla.suse.com/1027024 SUSE Bug 1027024 https://bugzilla.suse.com/1027025 SUSE Bug 1027025