Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged

Permalink CVE-2011-2897

created 2 months ago Activity log

Created suggestion 2 months ago

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing …

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw

References

https://security-tracker.debian.org/tracker/CVE-2011-2897 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2897 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2011-2897 x_transferredx_refsource_MISC

Affected products

gdk-pixbuf

==through 2.31.1

Matching in nixpkgs

pkgs.gdk-pixbuf

Library for image loading and manipulation

nixos-unstable 2.44.4
- nixpkgs-unstable 2.44.4
- nixos-unstable-small 2.44.4
nixos-25.11 2.44.4
- nixos-25.11-small 2.44.4
- nixpkgs-25.11-darwin 2.44.4

pkgs.gdk-pixbuf-xlib

Deprecated API for integrating GdkPixbuf with Xlib data types

nixos-unstable 2.40.2
- nixpkgs-unstable 2.40.2
- nixos-unstable-small 2.40.2
nixos-25.11 2.40.2
- nixos-25.11-small 2.40.2
- nixpkgs-25.11-darwin 2.40.2

pkgs.sbclPackages.cl-cffi-gtk-gdk-pixbuf

None

nixos-unstable 20230214-git
- nixpkgs-unstable 20230214-git
- nixos-unstable-small 20230214-git
nixos-25.11 20230214-git
- nixos-25.11-small 20230214-git
- nixpkgs-25.11-darwin 20230214-git

pkgs.tests.pkg-config.defaultPkgConfigPackages.%22gdk-pixbuf-2.0%22

Test whether gdk-pixbuf-2.42.12 exposes pkg-config modules gdk-pixbuf-2.0

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

Package maintainers

@hedning Tor Hedin Brønner <torhedinbronner@gmail.com>
@jtojnar Jan Tojnar <jtojnar@gmail.com>
@dasj19 Daniel Șerbănescu <daniel@serbanescu.dk>
@bobby285271 Bobby Rong <rjl931189261@126.com>
@7c6f434c Michael Raskin <7c6f434c@mail.ru>
@lukego Luke Gorrie <luke@snabb.co>
@nagy Daniel Nagy <danielnagy@posteo.de>
@hraban Hraban Luyat <hraban@0brg.net>
@Uthar Kasper Gałkowski <galkowskikasper@gmail.com>