gdk-pixbuf2 (SL6, SL7)

Synopsis: Moderate: gdk-pixbuf2 security update
Advisory ID: SLSA-2015:1694-1
Issue Date: 2015-08-31
CVE Numbers: CVE-2015-4491

An integer overflow, leading to a heap-based buffer overflow, was found in
the way gdk-pixbuf, an image loading library for GNOME, scaled certain
bitmap format images. An attacker could use a specially crafted BMP image
file that, when processed by an application compiled against the gdk-
pixbuf library, would cause that application to crash or execute arbitrary
code with the permissions of the user running the application.
(CVE-2015-4491)

SL6
x86_64
gdk-pixbuf2-2.24.1-6.el6_7.i686.rpm
gdk-pixbuf2-2.24.1-6.el6_7.x86_64.rpm
gdk-pixbuf2-debuginfo-2.24.1-6.el6_7.i686.rpm
gdk-pixbuf2-debuginfo-2.24.1-6.el6_7.x86_64.rpm
gdk-pixbuf2-devel-2.24.1-6.el6_7.i686.rpm
gdk-pixbuf2-devel-2.24.1-6.el6_7.x86_64.rpm
i386
gdk-pixbuf2-2.24.1-6.el6_7.i686.rpm
gdk-pixbuf2-debuginfo-2.24.1-6.el6_7.i686.rpm
gdk-pixbuf2-devel-2.24.1-6.el6_7.i686.rpm
SL7
x86_64
gdk-pixbuf2-2.28.2-5.el7_1.i686.rpm
gdk-pixbuf2-2.28.2-5.el7_1.x86_64.rpm
gdk-pixbuf2-debuginfo-2.28.2-5.el7_1.i686.rpm
gdk-pixbuf2-debuginfo-2.28.2-5.el7_1.x86_64.rpm
gdk-pixbuf2-devel-2.28.2-5.el7_1.i686.rpm
gdk-pixbuf2-devel-2.28.2-5.el7_1.x86_64.rpm

– Scientific Linux Development Team