gdk-pixbuf2-2.36.12-3.0.1.el7.AXS7

エラータID: AXSA:2025-10951:03

Release date: 
Tuesday, October 14, 2025 - 09:45
Subject: 
gdk-pixbuf2-2.36.12-3.0.1.el7.AXS7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

gdk-pixbuf is an image loading library that can be extended by loadable
modules for new image formats. It is used by toolkits such as GTK+ or
clutter.

Security Fix(es):

* CVE-2025-7345: fix heap buffer overflow during base64 encoding in
gdk_pixbuf__jpeg_image_load_increment()

CVE(s):
CVE-2025-7345
A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

Asianux Server 7 for x86_64
  1. gdk-pixbuf2-2.36.12-3.0.1.el7.AXS7.i686.rpm
    MD5: d2b2bcd31ee0c965e97d3e319be4ab05
    SHA-256: 252e790b403919cda22e4d33fb258e85fb834a78fa4484bb88f8a751927a9265
    Size: 570.14 kB
  2. gdk-pixbuf2-2.36.12-3.0.1.el7.AXS7.x86_64.rpm
    MD5: 9002d522b10c3cbe592830538afbfe8c
    SHA-256: 7e2c5ca67e97ac0af8a83bf13bcd635e33e3952827e65d269722e4114e720221
    Size: 569.44 kB
  3. gdk-pixbuf2-devel-2.36.12-3.0.1.el7.AXS7.i686.rpm
    MD5: 32ae569f67ea4ac1337a43e40ba2fe81
    SHA-256: 1bdb1891ea2bef50d172b678c372f6eb84f94abd86fade220c9b2f7b1d09ac6d
    Size: 214.32 kB
  4. gdk-pixbuf2-devel-2.36.12-3.0.1.el7.AXS7.x86_64.rpm
    MD5: 119355baeef064c46bc82316274ff52b
    SHA-256: 5b45aa8618c056ea625c2baae8ca57e84142a7fbab1ad199071b2582998057c7
    Size: 214.54 kB