tocsin

Debian/gdk-pixbuf: high 7.5

The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an ICO file.

Action: Upgrade gdk-pixbuf to 2.35.4-1 or later.

Affected

introducedfixedlast affected
02.35.4-1-

Fixed versions

2.35.4-1

Sources

published · modified · JSON