Red Hat Security AdvisoryRHSA-2012:1180
gimp security update
Released 2012-08-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) gimp-2:2.6.9-4.el6_3.3, gimp-help-browser-2:2.6.9-4.el6_3.3, gimp-libs-2:2.6.9-4.el6_3.3
- Red Hat Enterprise Linux Desktop Optional (v. 6) gimp-2:2.6.9-4.el6_3.3, gimp-devel-2:2.6.9-4.el6_3.3, gimp-devel-tools-2:2.6.9-4.el6_3.3 +1
- Red Hat Enterprise Linux Server (v. 6) gimp-2:2.6.9-4.el6_3.3, gimp-help-browser-2:2.6.9-4.el6_3.3, gimp-libs-2:2.6.9-4.el6_3.3
- Red Hat Enterprise Linux Server Optional (v. 6) gimp-2:2.6.9-4.el6_3.3, gimp-devel-2:2.6.9-4.el6_3.3, gimp-devel-2:2.6.9-4.el6_3.3.ppc +3
- Red Hat Enterprise Linux Workstation (v. 6) gimp-2:2.6.9-4.el6_3.3, gimp-help-browser-2:2.6.9-4.el6_3.3, gimp-libs-2:2.6.9-4.el6_3.3
- Red Hat Enterprise Linux Workstation Optional (v. 6) gimp-2:2.6.9-4.el6_3.3, gimp-devel-2:2.6.9-4.el6_3.3, gimp-devel-tools-2:2.6.9-4.el6_3.3 +1
Fixes 3 records
Priority LOW 38
Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service (application crash) and possibl…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05142 · Published 2012-08-25 · Fixed CWE-190
Priority LOW 38
Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which tri…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04954 · Published 2012-08-25 · Fixed CWE-787
Priority LOW 37
The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.11993 · Published 2011-08-19 · Partial fix CWE-787
THREATIST.IORead the docs