GDK-PixBuf: Denial of service A vulnerability in GDK-PixBuf library could lead to a Denial of Service condition. gdk-pixbuf 2020-12-23 2020-12-23 759094 local, remote 2.42.2 2.42.2

GDK-PixBuf is an image loading library for GTK+.

It was discovered that the GDK-PixBuf library did not properly handle certain GIF images.

A remote attacker could entice a user to open a specially crafted GIF image in an application linked against GDK-PixBuf library, possibly resulting in a Denial of Service condition.

There is no known workaround at this time.

All GDK-PixBuf library users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=x11-libs/gdk-pixbuf-2.42.2"
CVE-2020-29385 whissi whissi