ASA-201611-12 log generated external raw

[ASA-201611-12] lib32-gdk-pixbuf2: arbitrary code execution
Arch Linux Security Advisory ASA-201611-12 ========================================== Severity: Critical Date : 2016-11-03 CVE-ID : CVE-2016-6352 Package : lib32-gdk-pixbuf2 Type : arbitrary code execution Remote : Yes Link : Summary ======= The package lib32-gdk-pixbuf2 before version 2.36.0+2+ga7c869a-1 is vulnerable to arbitrary code execution. Resolution ========== Upgrade to 2.36.0+2+ga7c869a-1. # pacman -Syu "lib32-gdk-pixbuf2>=2.36.0+2+ga7c869a-1" The problem has been fixed upstream in version 2.35.3. Workaround ========== None. Description =========== An out-of-bounds write has been discovered in the OneLine32() function while parsing an ico file. A maliciously crafted file can cause the application to crash or possibly execute arbitrary code. Impact ====== A remote attacker is able to use a specially crafted ico file that, when loaded, is leading to arbitrary code execution. References ==========