Bug 16367

Summary:	gdk-pixbuf heap overflow and DoS
Product:	Mageia	Reporter:	Olav Vitters <olav>
Component:	Security	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	major
Priority:	Normal	CC:	davidwhodgins, lewyssmith, luigiwalser, mageia, olav, sysadmin-bugs, thierry.vignaud
Version:	5	Keywords:	validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA5-64-OK advisory
Source RPM:	gdk-pixbuf2.0-2.31.2-2.mga5.src.rpm	CVE:
Status comment:

Description Olav Vitters 2015-07-13 15:24:36 CEST

Report:
https://bugzilla.gnome.org/show_bug.cgi?id=752297

Patch:
https://git.gnome.org/browse/gdk-pixbuf/commit/?id=ffec86e

I think this affects gdk-pixbuf 2.31 and above. Not sure which version is on Mageia 5.

Reproducible: 

Steps to Reproduce:

Comment 1 Olav Vitters 2015-07-13 15:27:01 CEST

Mageia 5 has gdk-pixbuf2.0-2.31.2-2.mga5.src.rpm so probably affected.

Version: Cauldron => 5

Sander Lepik 2015-07-18 21:54:01 CEST

CC: (none) => mageia
Source RPM: gdk-pixbuf => gdk-pixbuf2.0-2.31.2-2.mga5.src.rpm

Comment 2 David Walser 2015-07-19 22:59:47 CEST

Fixed in Mageia 5 SVN.

CVE request:
http://openwall.com/lists/oss-security/2015/07/17/17

CC: (none) => luigiwalser

Thierry Vignaud 2015-07-31 09:34:26 CEST

CC: (none) => olav, thierry.vignaud

Comment 3 David Walser 2015-08-13 14:55:51 CEST

Apparently this is the CVE-2015-4491 issue that was fixed in Firefox 38.2:
http://openwall.com/lists/oss-security/2015/08/13/2

Advisory:
========================

Updated gdk-pixbuf packages fix security vulnerability:

Security researcher Gustavo Grieco reported a heap overflow in gdk-pixbuf.
This issue is triggered by the scaling of a malformed bitmap format image and
results in a potentially exploitable crash (CVE-2015-4491).

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4491
https://www.mozilla.org/en-US/security/advisories/mfsa2015-88/
http://openwall.com/lists/oss-security/2015/08/13/2
========================

Updated packages in core/updates_testing:
========================
gdk-pixbuf2.0-2.31.2-2.1.mga5
libgdk_pixbuf2.0_0-2.31.2-2.1.mga5
libgdk_pixbuf2.0-devel-2.31.2-2.1.mga5
libgdk_pixbuf-gir2.0-2.31.2-2.1.mga5

from gdk-pixbuf2.0-2.31.2-2.1.mga5.src.rpm

Assignee: bugsquad => qa-bugs

Comment 4 Lewis Smith 2015-08-13 21:45:26 CEST

Testing Mageia 5 x64, using:
 firefox-38.2.0-1.mga5 (just updated)
This update:
 lib64gdk_pixbuf2.0_0-2.31.2-2.1.mga5
 lib64gdk_pixbuf-gir2.0-2.31.2-2.1.mga5
 gdk-pixbuf2.0-2.31.2-2.1.mga5

Looked at flickr.com, just photographs. No problems.
OK.

CC: (none) => lewyssmith
Whiteboard: (none) => MGA5-64-OK

Dave Hodgins 2015-08-13 22:14:54 CEST

Keywords: (none) => validated_update
Whiteboard: MGA5-64-OK => MGA5-64-OK advisory
CC: (none) => davidwhodgins, sysadmin-bugs

Comment 5 Mageia Robot 2015-08-13 22:57:20 CEST

An update for this issue has been pushed to Mageia Updates repository.

http://advisories.mageia.org/MGASA-2015-0313.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED