Ubuntu 24.04 LTS: 7123-2 High: LibXrender Buffer Overflow

ubuntu

June 5, 2024

GDK-PixBuf could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

GDK-PixBuf could be made to crash or run programs as

your login if it opened a specially crafted file.

Software Description:

- gdk-pixbuf: GDK Pixbuf library

Details:

Pedro Ribeiro and Vitor Pedreira discovered that the GDK-PixBuf

library did not properly handle certain ANI files. An attacker

could use this flaw to cause GDK-PixBuf to crash, resulting in

a denial of service, or to possibly execute arbitrary code.

Topics Covered

security advisory moderate denial of service gdk-pixbuf ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
   libgdk-pixbuf-2.0-0             2.42.10+dfsg-3ubuntu3.1

Ubuntu 23.10
   libgdk-pixbuf-2.0-0             2.42.10+dfsg-1ubuntu0.1

Ubuntu 22.04 LTS
   libgdk-pixbuf-2.0-0             2.42.8+dfsg-1ubuntu0.3

Ubuntu 20.04 LTS
   libgdk-pixbuf2.0-0              2.40.0+dfsg-3ubuntu0.5

Ubuntu 18.04 LTS
   libgdk-pixbuf2.0-0              2.36.11-2ubuntu0.1~esm1
                                   Available with Ubuntu Pro

Ubuntu 16.04 LTS
   libgdk-pixbuf2.0-0              2.32.2-1ubuntu1.6+esm1
                                   Available with Ubuntu Pro

After a standard system update you need to restart your session to make all
the necessary changes.