* bsc#1159337 * bsc#1245227 * bsc#1246114 Cross-References: . # Security update for gdk-pixbuf Announcement ID: SUSE-SU-2025:03373-1 Release Date: 2025-09-26T12:26:32Z Rating: important References: * bsc#1159337 * bsc#1245227 * bsc#1246114 Cross-References: * CVE-2025-6199 * CVE-2025-7345 CVSS scores: * CVE-2025-6199 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-6199 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2025-6199 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2025-6199 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2025-7345 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-7345 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-7345 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for gdk-pixbuf fixes the following issues: * CVE-2025-7345: heap buffer overflow in gdkââ¬âpixbuf within the `gdk_pixbuf__jpeg_image_load_increment` function (bsc#1246114). * CVE-2025-6199: uninitialized memory could lead to leak arbitrary memory contents (bsc#1245227). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in-t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-3373=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-3373=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-3373=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-3373=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-3373=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-3373=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.15.2 * gdk-pixbuf-thumbnailer-2.40.0-150200.3.15.2 * libgdk_pixbuf-2_0-0-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.15.2 * gdk-pixbuf-devel-2.40.0-150200.3.15.2 * gdk-pixbuf-thumbnailer-debuginfo-2.40.0-150200.3.15.2 * libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.15.2 * gdk-pixbuf-debugsource-2.40.0-150200.3.15.2 * gdk-pixbuf-devel-debuginfo-2.40.0-150200.3.15.2 * typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.15.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * gdk-pixbuf-lang-2.40.0-150200.3.15.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.15.2 * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.40.0-150200.3.15.2 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.15.2 * gdk-pixbuf-thumbnailer-2.40.0-150200.3.15.2 * libgdk_pixbuf-2_0-0-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-2.40.0-150200.3.15.2 *gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.15.2 * gdk-pixbuf-devel-2.40.0-150200.3.15.2 * gdk-pixbuf-thumbnailer-debuginfo-2.40.0-150200.3.15.2 * libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.15.2 * gdk-pixbuf-debugsource-2.40.0-150200.3.15.2 * gdk-pixbuf-devel-debuginfo-2.40.0-150200.3.15.2 * typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.15.2 * SUSE Linux Enterprise Server 15 SP3 LTSS (noarch) * gdk-pixbuf-lang-2.40.0-150200.3.15.2 * SUSE Linux Enterprise Server 15 SP3 LTSS (x86_64) * libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.15.2 * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.40.0-150200.3.15.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.15.2 * gdk-pixbuf-thumbnailer-2.40.0-150200.3.15.2 * libgdk_pixbuf-2_0-0-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.15.2 * gdk-pixbuf-devel-2.40.0-150200.3.15.2 * gdk-pixbuf-thumbnailer-debuginfo-2.40.0-150200.3.15.2 * libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.15.2 * gdk-pixbuf-debugsource-2.40.0-150200.3.15.2 * gdk-pixbuf-devel-debuginfo-2.40.0-150200.3.15.2 * typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.15.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * gdk-pixbuf-lang-2.40.0-150200.3.15.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.15.2 * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.40.0-150200.3.15.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.15.2 * gdk-pixbuf-thumbnailer-2.40.0-150200.3.15.2 *libgdk_pixbuf-2_0-0-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.15.2 * gdk-pixbuf-devel-2.40.0-150200.3.15.2 * gdk-pixbuf-thumbnailer-debuginfo-2.40.0-150200.3.15.2 * libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.15.2 * gdk-pixbuf-debugsource-2.40.0-150200.3.15.2 * gdk-pixbuf-devel-debuginfo-2.40.0-150200.3.15.2 * typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.15.2 * SUSE Enterprise Storage 7.1 (noarch) * gdk-pixbuf-lang-2.40.0-150200.3.15.2 * SUSE Enterprise Storage 7.1 (x86_64) * libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.15.2 * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.40.0-150200.3.15.2 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.15.2 * libgdk_pixbuf-2_0-0-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.15.2 * libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.15.2 * gdk-pixbuf-debugsource-2.40.0-150200.3.15.2 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.15.2 * libgdk_pixbuf-2_0-0-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-2.40.0-150200.3.15.2 * gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.15.2 * libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.15.2 * gdk-pixbuf-debugsource-2.40.0-150200.3.15.2 ## References: * https://www.suse.com/security/cve/CVE-2025-6199.html * https://www.suse.com/security/cve/CVE-2025-7345.html * https://bugzilla.suse.com/show_bug.cgi?id=1159337 * https://bugzilla.suse.com/show_bug.cgi?id=1245227 * https://bugzilla.suse.com/show_bug.cgi?id=1246114 . Security update for gdk-pixbuf fixes important issues with heap overflow and memory leaks. Learn more about the update.. SUSE SecurityUpdate,gdk-pixbuf Heap Overflow,gdk-pixbuf Memory Leak. . Severity: Important. LinuxSecurity.com Team
An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:1566-2 Rating: important References: #1095218 #1095219 Cross-References: CVE-2018-11233 CVE-2018-11235 Affected Products: SUSE Linux Enterprise Server 12-SP2-BCL ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for git fixes several issues. These security issues were fixed: - CVE-2018-11233: Path sanity-checks on NTFS allowed attackers to read arbitrary memory (bsc#1095218) - CVE-2018-11235: Arbitrary code execution when recursively cloning a malicious repository (bsc#1095219) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2018-1080=1 Package List: - SUSE Linux Enterprise Server 12-SP2-BCL (noarch): git-doc-2.12.3-27.14.1 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): git-core-2.12.3-27.14.1 git-core-debuginfo-2.12.3-27.14.1 git-debugsource-2.12.3-27.14.1 References: https://www.suse.com/security/cve/CVE-2018-11233.html https://www.suse.com/security/cve/CVE-2018-11235.html https://bugzilla.suse.com/1095218 https://bugzilla.suse.com/1095219 _______________________________________________ sle-security-updates mailing list
Get the latest Linux and open source security news straight to your inbox.