[oss-security] CVE Request: gdk-pixbuf heap overflow and DoS

[Mark Felder]

On Fri, Jul 17, 2015, at 11:34, Gustavo Grieco wrote:
> Hi,
> 
> I would like to request a CVE for the heap overflow and DoS found in
> several versions of gdk-pixbuf. It should be fixed:
> 
> https://bugzilla.gnome.org/show_bug.cgi?id=752297
> 
> Thanks!

Can someone check into this? This was reported to oss-sec mailing list.
I think we are potentially vulnerable, but I'm not familiar enough with
gdk-pixbuf know if updating it could have any consequences and creating
a vuxml entry right now will prevent installing a lot of desktop
software.


Thanks!