Re: [SECURITY] [DLA 1234-1] gdk-pixbuf security update

[Pascal Hambourg <pascal@plouf.fr.eu.org>]

Hello,

Le 08/01/2018 à 15:55, Chris Lamb a écrit :
> Package        : gdk-pixbuf
> Version        : 2.26.1-1+deb7u7
> CVE ID         : CVE-2017-1000422
>
> It was discovered that there were several integer overflows in
> gdk-pixbuf, a library to manipulate images for the GTK graphics toolkit.
> This could have led to memory corruption and potential code execution.
>
> For Debian 7 "Wheezy", this issue has been fixed in gdk-pixbuf version
> 2.26.1-1+deb7u7.

The following message was printed while upgrading on i386 :

Paramétrage de libgdk-pixbuf2.0-common (2.26.1-1+deb7u7) ...
Paramétrage de libgdk-pixbuf2.0-0:i386 (2.26.1-1+deb7u7) ...
g_module_open() failed for 
/usr/lib/i386-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-gif.so: 
/usr/lib/i386-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-gif.so: 
undefined symbol: g_uint64_checked_mul

("Paramétrage" means "Setup")

dpkg -s libgdk-pixbuf2.0-0 prints "Status: install ok installed".

Is it harmless or should I worry ?