Debian Package Tracker
Register | Log in
Subscribe

gdk-pixbuf

Choose email to subscribe with

general
  • source: gdk-pixbuf (main)
  • version: 2.44.7+dfsg-1
  • maintainer: Debian GNOME Maintainers (archive) (DMD)
  • uploaders: Laurent Bigonville [DMD] – Emilio Pozuelo Monfort [DMD] – Jeremy Bicha [DMD]
  • arch: all any
  • std-ver: 4.7.4
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 2.42.2+dfsg-1+deb11u2
  • o-o-sec: 2.42.2+dfsg-1+deb11u5
  • oldstable: 2.42.10+dfsg-1+deb12u4
  • old-sec: 2.42.10+dfsg-1+deb12u4
  • stable: 2.42.12+dfsg-4+deb13u1
  • stable-sec: 2.42.12+dfsg-4+deb13u1
  • testing: 2.44.7+dfsg-1
  • unstable: 2.44.7+dfsg-1
versioned links
  • 2.42.2+dfsg-1+deb11u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.42.2+dfsg-1+deb11u5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.42.10+dfsg-1+deb12u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.42.12+dfsg-4+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.44.7+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • gdk-pixbuf-tests
  • gir1.2-gdkpixbuf-2.0
  • libgdk-pixbuf-2.0-0 (5 bugs: 1, 3, 1, 0)
  • libgdk-pixbuf-2.0-0-udeb
  • libgdk-pixbuf-2.0-dev
  • libgdk-pixbuf2.0-bin
  • libgdk-pixbuf2.0-common
  • libgdk-pixbuf2.0-doc
action needed
1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:
  • CVE-2026-16768: A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.
Created: 2026-07-25 Last update: 2026-07-25 01:03
1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:
  • CVE-2026-16768: A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.
Created: 2026-07-25 Last update: 2026-07-25 01:03
1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:
  • CVE-2026-16768: A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.
Created: 2026-07-25 Last update: 2026-07-25 01:03
1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:
  • CVE-2026-16768: A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.
Created: 2026-07-25 Last update: 2026-07-25 01:03
lintian reports 1 error and 3 warnings high
Lintian reports 1 error and 3 warnings about this package. You should make the package lintian clean getting rid of them.
Created: 2026-04-05 Last update: 2026-07-16 21:18
1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:
  • CVE-2026-16768: (needs triaging) A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-07-25 Last update: 2026-07-25 01:03
debian/patches: 1 patch to forward upstream low

Among the 6 debian patches available in version 2.44.7+dfsg-1 of the package, we noticed the following issues:

  • 1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.
Created: 2026-02-09 Last update: 2026-07-16 12:20
Issues found with some translations low

Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.

Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.

Created: 2026-02-10 Last update: 2026-02-10 14:00
news
[rss feed]
  • [2026-07-18] gdk-pixbuf 2.44.7+dfsg-1 MIGRATED to testing (Debian testing watch)
  • [2026-07-16] Accepted gdk-pixbuf 2.44.7+dfsg-1 (source) into unstable (Jeremy Bícha)
  • [2026-04-18] Accepted gdk-pixbuf 2.42.10+dfsg-1+deb12u4 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
  • [2026-04-18] Accepted gdk-pixbuf 2.42.12+dfsg-4+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
  • [2026-04-14] Accepted gdk-pixbuf 2.42.2+dfsg-1+deb11u5 (source) into oldoldstable-security (Emilio Pozuelo Monfort)
  • [2026-04-11] Accepted gdk-pixbuf 2.42.10+dfsg-1+deb12u4 (source) into oldstable-security (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
  • [2026-04-11] Accepted gdk-pixbuf 2.42.12+dfsg-4+deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
  • [2026-04-07] gdk-pixbuf 2.44.6+dfsg-2 MIGRATED to testing (Debian testing watch)
  • [2026-04-04] Accepted gdk-pixbuf 2.44.6+dfsg-2 (source) into unstable (Simon McVittie)
  • [2026-04-02] Accepted gdk-pixbuf 2.44.6+dfsg-1 (source) into unstable (Jeremy Bícha)
  • [2026-02-21] gdk-pixbuf 2.44.5+dfsg-4 MIGRATED to testing (Debian testing watch)
  • [2026-02-15] gdk-pixbuf 2.44.5+dfsg-3 MIGRATED to testing (Debian testing watch)
  • [2026-02-14] Accepted gdk-pixbuf 2.44.5+dfsg-4 (source) into unstable (Jeremy Bícha)
  • [2026-02-09] Accepted gdk-pixbuf 2.44.5+dfsg-3 (source) into unstable (Jeremy Bícha)
  • [2026-02-05] Accepted gdk-pixbuf 2.44.5+dfsg-2 (source) into experimental (Jeremy Bícha)
  • [2026-02-03] Accepted gdk-pixbuf 2.44.5+dfsg-1 (source) into experimental (Alessandro Astone) (signed by: Jeremy Bícha)
  • [2025-12-07] Accepted gdk-pixbuf 2.42.10+dfsg-1+deb12u3 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Carlos Henrique Lima Melara)
  • [2025-11-13] Accepted gdk-pixbuf 2.44.4+dfsg-3 (source) into experimental (Jeremy Bícha)
  • [2025-11-12] Accepted gdk-pixbuf 2.44.4+dfsg-2 (source) into experimental (Jeremy Bícha)
  • [2025-10-24] gdk-pixbuf 2.44.4+dfsg-1 MIGRATED to testing (Debian testing watch)
  • [2025-10-23] Accepted gdk-pixbuf 2.42.2+dfsg-1+deb11u4 (source) into oldoldstable-security (Carlos Henrique Lima Melara)
  • [2025-10-21] Accepted gdk-pixbuf 2.44.4+dfsg-1 (source) into unstable (Jeremy Bícha)
  • [2025-10-04] gdk-pixbuf 2.44.3+dfsg-3 MIGRATED to testing (Debian testing watch)
  • [2025-10-01] Accepted gdk-pixbuf 2.44.3+dfsg-3 (source) into unstable (Jeremy Bícha)
  • [2025-10-01] Accepted gdk-pixbuf 2.44.3+dfsg-2 (source) into unstable (Jeremy Bícha)
  • [2025-09-30] Accepted gdk-pixbuf 2.44.3+dfsg-1 (source) into experimental (Jeremy Bícha)
  • [2025-08-22] gdk-pixbuf 2.42.12+dfsg-5 MIGRATED to testing (Debian testing watch)
  • [2025-08-15] Accepted gdk-pixbuf 2.42.12+dfsg-5 (source) into unstable (Simon McVittie)
  • [2025-07-31] gdk-pixbuf 2.42.12+dfsg-4 MIGRATED to testing (Debian testing watch)
  • [2025-07-12] Accepted gdk-pixbuf 2.42.12+dfsg-4 (source) into unstable (Simon McVittie)
  • 1
  • 2
bugs [bug history graph]
  • all: 9
  • RC: 1
  • I&N: 7
  • M&W: 1
  • F&P: 0
  • patch: 0
links
  • homepage
  • lintian (1, 3)
  • buildd: logs, reproducibility, cross
  • popcon
  • browse source code
  • other distros
  • security tracker
  • l10n (-, 85)
  • debian patches
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 2.44.5+dfsg-4ubuntu1
  • patches for 2.44.5+dfsg-4ubuntu1

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing