Date:         Mon, 31 Aug 2015 14:15:36 +0000
Reply-To:     scientific-linux-users@listserv.fnal.gov
Sender:       Security Errata for Scientific Linux
              
From:         Pat Riehecky 
Subject:      Security ERRATA Moderate: gdk-pixbuf2 on SL6.x, SL7.x i386/x86_64
MIME-Version: 1.0
Message-ID:  <20150831141536.9244.18021@slpackages.fnal.gov>

Synopsis:          Moderate: gdk-pixbuf2 security update
Advisory ID:       SLSA-2015:1694-1
Issue Date:        2015-08-31
CVE Numbers:       CVE-2015-4491
--

An integer overflow, leading to a heap-based buffer overflow, was found in
the way gdk-pixbuf, an image loading library for GNOME, scaled certain
bitmap format images. An attacker could use a specially crafted BMP image
file that, when processed by an application compiled against the gdk-
pixbuf library, would cause that application to crash or execute arbitrary
code with the permissions of the user running the application.
(CVE-2015-4491)
--

SL6
  x86_64
    gdk-pixbuf2-2.24.1-6.el6_7.i686.rpm
    gdk-pixbuf2-2.24.1-6.el6_7.x86_64.rpm
    gdk-pixbuf2-debuginfo-2.24.1-6.el6_7.i686.rpm
    gdk-pixbuf2-debuginfo-2.24.1-6.el6_7.x86_64.rpm
    gdk-pixbuf2-devel-2.24.1-6.el6_7.i686.rpm
    gdk-pixbuf2-devel-2.24.1-6.el6_7.x86_64.rpm
  i386
    gdk-pixbuf2-2.24.1-6.el6_7.i686.rpm
    gdk-pixbuf2-debuginfo-2.24.1-6.el6_7.i686.rpm
    gdk-pixbuf2-devel-2.24.1-6.el6_7.i686.rpm
SL7
  x86_64
    gdk-pixbuf2-2.28.2-5.el7_1.i686.rpm
    gdk-pixbuf2-2.28.2-5.el7_1.x86_64.rpm
    gdk-pixbuf2-debuginfo-2.28.2-5.el7_1.i686.rpm
    gdk-pixbuf2-debuginfo-2.28.2-5.el7_1.x86_64.rpm
    gdk-pixbuf2-devel-2.28.2-5.el7_1.i686.rpm
    gdk-pixbuf2-devel-2.28.2-5.el7_1.x86_64.rpm

- Scientific Linux Development Team