• [SECURITY] [DSA 5946-1] gdk-pixbuf security update

    From Moritz Muehlenhoff@21:1/5 to All on Sun Jun 22 20:20:01 2025
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-5946-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff
    June 22, 2025 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : gdk-pixbuf
    CVE ID : CVE-2025-6199

    It was discovered that incorrect bounds validation in the GIF decoder of
    the GDK Pixbuf library may result in memory disclosure.

    For the stable distribution (bookworm), this problem has been fixed in
    version 2.42.10+dfsg-1+deb12u2.

    We recommend that you upgrade your gdk-pixbuf packages.

    For the detailed security status of gdk-pixbuf please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/gdk-pixbuf

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmhYRSgACgkQEMKTtsN8 TjY1pRAAr387CC/JCnbnApDir9WW9ibbTzKuDd3H8G6B/fP7WYum8Z1j29LSsU1K CDIn6vQkiV7STynfYUQb42Hy23B8uXzLlZX0nxDsdM8k9fG2uTKWT98UKzyWo+aw 0UCETTJwg/D+YRch8SvSZs7MEURG4P/FrreA0zO+cKuSKCgUYsAk2iS77YPnaTAo f+t00Gzb/4GO2q91RsKzJEuauES3HtuCZgD+Qww+B9l7ZEUQSP84/wOIR2p79kHU yEfS7h1Tfp4Cs0SQgGeTIzvQhHtDtavFMTbkrabEfRjLH60hTQejNus/RvJ1DIDV MqTRq4Ek+VRt6CGAWlWSdjgsrn+Ba485vJNilokgIhNMeJxZE3QMUrvShYZKUSVQ fTrmx/McIQ8kPGKtLNbIwhUV71KmyRpGYaAd1HzFDyrwNiRjf/+5A9SxOxYGqvp6 8UNijW3Tk8jjOBZ8JAlOPm4I06tAZ0HOqWh8YXEF89fXo6K9fEI9NSWbcF/6eA4Y k5V2QXRtIbeaW0o63tGe0yjSJkeq3JyFDpV6tcSj/RgjzbjmlKZ8aUqTxtXTJyTb 8kn84sRXyq+2+B0UvYaS9UItMsFBxGCioxB4XnoC2yHhjg+3e/1f/UkyzeqSGYXd HQ77c64OY/1A8nGSqK0Fr/h2LzPoYV5im8gmq2e7qLdkbVP6KoY=
    =azRU
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)