From:
[email protected]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
- ------------------------------------------------------------------------- Debian Security Advisory DSA-3978-1
[email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 18, 2017
https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : gdk-pixbuf
CVE ID : CVE-2017-2862
Debian Bug : 874552
Marcin Noga discovered a buffer overflow in the JPEG loader of the GDK
Pixbuf library, which may result in the execution of arbitrary code if
a malformed file is opened.
For the oldstable distribution (jessie), this problem has been fixed
in version 2.31.1-2+deb8u6.
For the stable distribution (stretch), this problem has been fixed in
version 2.36.5-2+deb9u1.
We recommend that you upgrade your gdk-pixbuf packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at:
https://www.debian.org/security/
Mailing list:
[email protected]
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAlnALyoACgkQEMKTtsN8 TjaexA//c/rXlBtAH2ZE8s7n3Pea2Wg8LOnEsxeS5/czX4vt/diKRswelaLL4NrZ HnrMf8SiWs91rvDW39Jx2jnthffOhWrge/RWi7iydJxkEhdLf7PMQUMEflX9CBft QcHH5RUzaWuT8znq3rhjFX0yLfDm0ZzFF/hTqlyv5ujkbQWt7nirNGZSYlNTPAXi 2LvF8GmjaE1t8kAWpWdFppvW2U6qAcHe1UFR+gnB4tT9/I1RAFVQOXB2MM4ADhbb kiXV+tE40aZOUiOQcpyfmz3oCdp8b/cVzQFSEUBcquBl4FqvxFmX4/j4vgCu1DAw LkxSfIcrMq1DXR7jJ5pQUSA2N9KL76S7mu9lYQOlk+jq8Y8xltvxXPnjPFJ0Tqi7 boPiVcvBc+hLIqdPJerP75HsFI+WgMovK+ZB7vRI+Qm00VqUPbaTAjYplh5b3Dfq SnpC0OCdWL8KXVHO4iYgvjPcurdhvNZjQHBGJdz2XTR92Xzl0aVPH6p1rOvwxzqv 9uqOqQgrUroczdQYQ7Hc0p6z7DoZscyHq76j66BtBC11/fXUM5N6J5CIel5360yf f5WGaDJLgH/A68y8m1QRMkuCAtqeF2FodHpqUQPSyy+0sCLve6RBTkqi9SCzhWXe IUynaeHi+BoggbVPXU7g9V7U/z0GWGUzIJHLG6xxdbRo3JlZwAI=
=AohV
-----END PGP SIGNATURE-----
--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)