Security update for gdk-pixbuf SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:2996-1 Final 1 1 2022-09-02T10:12:53Z current 2022-09-02T10:12:53Z 2022-09-02T10:12:53Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for gdk-pixbuf This update for gdk-pixbuf fixes the following issues: - CVE-2021-46829: Fixed overflow when compositing or clearing frames (bsc#1201826). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP2-SAP-Azure-2022-2996,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2022-2996,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2022-2996,Image SLES15-SP2-SAP-BYOS-Azure-2022-2996,Image SLES15-SP2-SAP-BYOS-EC2-HVM-2022-2996,Image SLES15-SP2-SAP-BYOS-GCE-2022-2996,Image SLES15-SP2-SAP-EC2-HVM-2022-2996,Image SLES15-SP2-SAP-GCE-2022-2996,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2022-2996,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2022-2996,Image SLES15-SP3-SAP-BYOS-Azure-2022-2996,Image SLES15-SP3-SAP-BYOS-EC2-HVM-2022-2996,Image SLES15-SP3-SAP-BYOS-GCE-2022-2996,Image SLES15-SP3-SAPCAL-Azure-2022-2996,Image SLES15-SP3-SAPCAL-EC2-HVM-2022-2996,Image SLES15-SP3-SAPCAL-GCE-2022-2996,SUSE-2022-2996,SUSE-SLE-Module-Basesystem-15-SP3-2022-2996,SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-2996,SUSE-SUSE-MicroOS-5.2-2022-2996,openSUSE-Leap-Micro-5.2-2022-2996,openSUSE-SLE-15.3-2022-2996 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20222996-1/ Link for SUSE-SU-2022:2996-1 https://lists.suse.com/pipermail/sle-security-updates/2022-September/012066.html E-Mail link for SUSE-SU-2022:2996-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1201826 SUSE Bug 1201826 https://www.suse.com/security/cve/CVE-2021-46829/ SUSE CVE CVE-2021-46829 page Image SLES15-SP2-SAP-Azure Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-BYOS-Azure Image SLES15-SP2-SAP-BYOS-EC2-HVM Image SLES15-SP2-SAP-BYOS-GCE Image SLES15-SP2-SAP-EC2-HVM Image SLES15-SP2-SAP-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-BYOS-Azure Image SLES15-SP3-SAP-BYOS-EC2-HVM Image SLES15-SP3-SAP-BYOS-GCE Image SLES15-SP3-SAPCAL-Azure Image SLES15-SP3-SAPCAL-EC2-HVM Image SLES15-SP3-SAPCAL-GCE SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 openSUSE Leap 15.3 openSUSE Leap Micro 5.2 gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 gdk-pixbuf-devel-2.40.0-150200.3.6.1 gdk-pixbuf-devel-32bit-2.40.0-150200.3.6.1 gdk-pixbuf-devel-64bit-2.40.0-150200.3.6.1 gdk-pixbuf-lang-2.40.0-150200.3.6.1 gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.6.1 gdk-pixbuf-query-loaders-64bit-2.40.0-150200.3.6.1 gdk-pixbuf-thumbnailer-2.40.0-150200.3.6.1 libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.6.1 libgdk_pixbuf-2_0-0-64bit-2.40.0-150200.3.6.1 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1 typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.6.1 gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-Azure libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-Azure gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-BYOS-Azure libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-BYOS-Azure gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-BYOS-GCE libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-BYOS-GCE gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-EC2-HVM libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-EC2-HVM gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-GCE libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP2-SAP-GCE gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAPCAL-Azure libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAPCAL-Azure gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAPCAL-GCE libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of Image SLES15-SP3-SAPCAL-GCE gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of SUSE Linux Enterprise Micro 5.2 libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of SUSE Linux Enterprise Micro 5.2 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1 as a component of SUSE Linux Enterprise Micro 5.2 gdk-pixbuf-devel-2.40.0-150200.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 gdk-pixbuf-lang-2.40.0-150200.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 gdk-pixbuf-thumbnailer-2.40.0-150200.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 gdk-pixbuf-devel-2.40.0-150200.3.6.1 as a component of openSUSE Leap 15.3 gdk-pixbuf-devel-32bit-2.40.0-150200.3.6.1 as a component of openSUSE Leap 15.3 gdk-pixbuf-lang-2.40.0-150200.3.6.1 as a component of openSUSE Leap 15.3 gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of openSUSE Leap 15.3 gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.6.1 as a component of openSUSE Leap 15.3 gdk-pixbuf-thumbnailer-2.40.0-150200.3.6.1 as a component of openSUSE Leap 15.3 libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of openSUSE Leap 15.3 libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.6.1 as a component of openSUSE Leap 15.3 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1 as a component of openSUSE Leap 15.3 typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.6.1 as a component of openSUSE Leap 15.3 gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 as a component of openSUSE Leap Micro 5.2 libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 as a component of openSUSE Leap Micro 5.2 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1 as a component of openSUSE Leap Micro 5.2 GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems. CVE-2021-46829 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 Image SLES15-SP2-SAP-Azure:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP2-SAP-Azure:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 Image SLES15-SP2-SAP-BYOS-Azure:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP2-SAP-BYOS-Azure:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 Image SLES15-SP2-SAP-BYOS-GCE:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP2-SAP-BYOS-GCE:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 Image SLES15-SP2-SAP-EC2-HVM:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP2-SAP-EC2-HVM:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 Image SLES15-SP2-SAP-GCE:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP2-SAP-GCE:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 Image SLES15-SP3-SAP-BYOS-Azure:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP3-SAP-BYOS-Azure:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 Image SLES15-SP3-SAP-BYOS-GCE:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP3-SAP-BYOS-GCE:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 Image SLES15-SP3-SAPCAL-Azure:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP3-SAPCAL-Azure:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 Image SLES15-SP3-SAPCAL-EC2-HVM:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP3-SAPCAL-EC2-HVM:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 Image SLES15-SP3-SAPCAL-GCE:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 Image SLES15-SP3-SAPCAL-GCE:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 SUSE Linux Enterprise Micro 5.2:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 SUSE Linux Enterprise Micro 5.2:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 SUSE Linux Enterprise Micro 5.2:typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:gdk-pixbuf-devel-2.40.0-150200.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:gdk-pixbuf-lang-2.40.0-150200.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:gdk-pixbuf-thumbnailer-2.40.0-150200.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.6.1 openSUSE Leap 15.3:gdk-pixbuf-devel-2.40.0-150200.3.6.1 openSUSE Leap 15.3:gdk-pixbuf-devel-32bit-2.40.0-150200.3.6.1 openSUSE Leap 15.3:gdk-pixbuf-lang-2.40.0-150200.3.6.1 openSUSE Leap 15.3:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 openSUSE Leap 15.3:gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.6.1 openSUSE Leap 15.3:gdk-pixbuf-thumbnailer-2.40.0-150200.3.6.1 openSUSE Leap 15.3:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 openSUSE Leap 15.3:libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.6.1 openSUSE Leap 15.3:typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1 openSUSE Leap 15.3:typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.6.1 openSUSE Leap Micro 5.2:gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1 openSUSE Leap Micro 5.2:libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1 openSUSE Leap Micro 5.2:typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222996-1/ https://www.suse.com/security/cve/CVE-2021-46829.html CVE-2021-46829 https://bugzilla.suse.com/1201826 SUSE Bug 1201826