<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for gtk2</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2015:1787-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2015-10-07T10:26:33Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2015-10-07T10:26:33Z</InitialReleaseDate>
    <CurrentReleaseDate>2015-10-07T10:26:33Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for gtk2</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">gtk2 was updated to fix two security issues.

These security issues were fixed:
- CVE-2015-4491: Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, allowed remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that were mishandled during scaling (bsc#942801).
- CVE-2015-7674: Fix overflow when scaling GIF files (bsc#948791).

This non-security issue was fixed:
- Add the script which generates gdk-pixbuf64.loaders to the spec file (bsc#922741).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">sdksp3-gtk2-12146,sdksp4-gtk2-12146,sledsp3-gtk2-12146,sledsp4-gtk2-12146,slessp3-gtk2-12146,slessp4-gtk2-12146</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151787-1/</URL>
      <Description>Link for SUSE-SU-2015:1787-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2015-October/001638.html</URL>
      <Description>E-Mail link for SUSE-SU-2015:1787-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/922741</URL>
      <Description>SUSE Bug 922741</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/942801</URL>
      <Description>SUSE Bug 942801</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/948791</URL>
      <Description>SUSE Bug 948791</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-4491/</URL>
      <Description>SUSE CVE CVE-2015-4491 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-7674/</URL>
      <Description>SUSE CVE CVE-2015-7674 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Desktop 11 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Desktop 11 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Desktop 11 SP3" CPE="cpe:/o:suse:suse_sled:11:sp3">SUSE Linux Enterprise Desktop 11 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Desktop 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Desktop 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Desktop 11 SP4" CPE="cpe:/o:suse:suse_sled:11:sp4">SUSE Linux Enterprise Desktop 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3" CPE="cpe:/o:suse:suse_sles:11:sp3">SUSE Linux Enterprise Server 11 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP3-TERADATA">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA" CPE="cpe:/o:suse:sles:11:sp3:teradata">SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4" CPE="cpe:/o:suse:suse_sles:11:sp4">SUSE Linux Enterprise Server 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 11 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 11 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP3" CPE="cpe:/o:suse:sles_sap:11:sp3">SUSE Linux Enterprise Server for SAP Applications 11 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4" CPE="cpe:/o:suse:sles_sap:11:sp4">SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Software Development Kit 11 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Software Development Kit 11 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP3" CPE="cpe:/a:suse:sle-sdk:11:sp3">SUSE Linux Enterprise Software Development Kit 11 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Software Development Kit 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Software Development Kit 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP4" CPE="cpe:/a:suse:sle-sdk:11:sp4">SUSE Linux Enterprise Software Development Kit 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="gtk2-devel-2.18.9-0.35.1">
      <FullProductName ProductID="gtk2-devel-2.18.9-0.35.1">gtk2-devel-2.18.9-0.35.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gtk2-devel-32bit-2.18.9-0.35.1">
      <FullProductName ProductID="gtk2-devel-32bit-2.18.9-0.35.1">gtk2-devel-32bit-2.18.9-0.35.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gtk2-2.18.9-0.35.1">
      <FullProductName ProductID="gtk2-2.18.9-0.35.1">gtk2-2.18.9-0.35.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gtk2-32bit-2.18.9-0.35.1">
      <FullProductName ProductID="gtk2-32bit-2.18.9-0.35.1">gtk2-32bit-2.18.9-0.35.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gtk2-lang-2.18.9-0.35.1">
      <FullProductName ProductID="gtk2-lang-2.18.9-0.35.1">gtk2-lang-2.18.9-0.35.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gtk2-doc-2.18.9-0.35.1">
      <FullProductName ProductID="gtk2-doc-2.18.9-0.35.1">gtk2-doc-2.18.9-0.35.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gtk2-x86-2.18.9-0.35.1">
      <FullProductName ProductID="gtk2-x86-2.18.9-0.35.1">gtk2-x86-2.18.9-0.35.1</FullProductName>
    </Branch>
    <Relationship ProductReference="gtk2-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 11 SP3:gtk2-2.18.9-0.35.1">gtk2-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Desktop 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-32bit-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 11 SP3:gtk2-32bit-2.18.9-0.35.1">gtk2-32bit-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Desktop 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-lang-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 11 SP3:gtk2-lang-2.18.9-0.35.1">gtk2-lang-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Desktop 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 11 SP4:gtk2-2.18.9-0.35.1">gtk2-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Desktop 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-32bit-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 11 SP4:gtk2-32bit-2.18.9-0.35.1">gtk2-32bit-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Desktop 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-lang-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 11 SP4:gtk2-lang-2.18.9-0.35.1">gtk2-lang-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Desktop 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3:gtk2-2.18.9-0.35.1">gtk2-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-32bit-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3:gtk2-32bit-2.18.9-0.35.1">gtk2-32bit-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-doc-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3:gtk2-doc-2.18.9-0.35.1">gtk2-doc-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-lang-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3:gtk2-lang-2.18.9-0.35.1">gtk2-lang-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-x86-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3:gtk2-x86-2.18.9-0.35.1">gtk2-x86-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:gtk2-2.18.9-0.35.1">gtk2-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-32bit-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:gtk2-32bit-2.18.9-0.35.1">gtk2-32bit-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-doc-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:gtk2-doc-2.18.9-0.35.1">gtk2-doc-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-lang-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:gtk2-lang-2.18.9-0.35.1">gtk2-lang-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-x86-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:gtk2-x86-2.18.9-0.35.1">gtk2-x86-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:gtk2-2.18.9-0.35.1">gtk2-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-32bit-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:gtk2-32bit-2.18.9-0.35.1">gtk2-32bit-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-doc-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:gtk2-doc-2.18.9-0.35.1">gtk2-doc-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-lang-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:gtk2-lang-2.18.9-0.35.1">gtk2-lang-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-x86-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:gtk2-x86-2.18.9-0.35.1">gtk2-x86-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP3:gtk2-2.18.9-0.35.1">gtk2-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-32bit-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP3:gtk2-32bit-2.18.9-0.35.1">gtk2-32bit-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-doc-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP3:gtk2-doc-2.18.9-0.35.1">gtk2-doc-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-lang-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP3:gtk2-lang-2.18.9-0.35.1">gtk2-lang-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-x86-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP3:gtk2-x86-2.18.9-0.35.1">gtk2-x86-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-2.18.9-0.35.1">gtk2-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-32bit-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-32bit-2.18.9-0.35.1">gtk2-32bit-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-doc-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-doc-2.18.9-0.35.1">gtk2-doc-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-lang-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-lang-2.18.9-0.35.1">gtk2-lang-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-x86-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-x86-2.18.9-0.35.1">gtk2-x86-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-devel-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP3:gtk2-devel-2.18.9-0.35.1">gtk2-devel-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-devel-32bit-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP3:gtk2-devel-32bit-2.18.9-0.35.1">gtk2-devel-32bit-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-devel-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-2.18.9-0.35.1">gtk2-devel-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gtk2-devel-32bit-2.18.9-0.35.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-32bit-2.18.9-0.35.1">gtk2-devel-32bit-2.18.9-0.35.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that are mishandled during scaling.</Note>
    </Notes>
    <CVE>CVE-2015-4491</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 11 SP3:gtk2-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 11 SP3:gtk2-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 11 SP3:gtk2-lang-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 11 SP4:gtk2-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 11 SP4:gtk2-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 11 SP4:gtk2-lang-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:gtk2-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:gtk2-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:gtk2-doc-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:gtk2-lang-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:gtk2-x86-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:gtk2-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:gtk2-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:gtk2-doc-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:gtk2-lang-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:gtk2-x86-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:gtk2-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:gtk2-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:gtk2-doc-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:gtk2-lang-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:gtk2-x86-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:gtk2-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:gtk2-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:gtk2-doc-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:gtk2-lang-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:gtk2-x86-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-doc-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-lang-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-x86-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:gtk2-devel-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:gtk2-devel-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-32bit-2.18.9-0.35.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.8</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151787-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-4491.html</URL>
        <Description>CVE-2015-4491</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/940806</URL>
        <Description>SUSE Bug 940806</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/942801</URL>
        <Description>SUSE Bug 942801</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/948790</URL>
        <Description>SUSE Bug 948790</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow.</Note>
    </Notes>
    <CVE>CVE-2015-7674</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 11 SP3:gtk2-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 11 SP3:gtk2-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 11 SP3:gtk2-lang-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 11 SP4:gtk2-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 11 SP4:gtk2-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 11 SP4:gtk2-lang-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:gtk2-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:gtk2-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:gtk2-doc-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:gtk2-lang-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:gtk2-x86-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:gtk2-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:gtk2-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:gtk2-doc-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:gtk2-lang-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:gtk2-x86-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:gtk2-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:gtk2-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:gtk2-doc-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:gtk2-lang-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:gtk2-x86-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:gtk2-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:gtk2-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:gtk2-doc-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:gtk2-lang-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:gtk2-x86-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-doc-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-lang-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:gtk2-x86-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:gtk2-devel-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:gtk2-devel-32bit-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-2.18.9-0.35.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:gtk2-devel-32bit-2.18.9-0.35.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.8</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151787-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-7674.html</URL>
        <Description>CVE-2015-7674</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/948791</URL>
        <Description>SUSE Bug 948791</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
