Red Hat Security AdvisoryRHSA-2016:2589
gimp security, bug fix, and enhancement update
Released 2016-11-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) gimp-2:2.8.16-3.el7, gimp-help-2.8.2-1.el7, gimp-libs-2:2.8.16-3.el7
- Red Hat Enterprise Linux Client Optional (v. 7) gimp-devel-2:2.8.16-3.el7, gimp-devel-tools-2:2.8.16-3.el7, gimp-help-ca-2.8.2-1.el7 +16
- Red Hat Enterprise Linux Server (v. 7) gimp-2:2.8.16-3.el7, gimp-help-2.8.2-1.el7, gimp-libs-2:2.8.16-3.el7
- Red Hat Enterprise Linux Server Optional (v. 7) gimp-2:2.8.16-3.el7, gimp-devel-2:2.8.16-3.el7, gimp-devel-2:2.8.16-3.el7.ppc +20
- Red Hat Enterprise Linux Workstation (v. 7) gimp-2:2.8.16-3.el7, gimp-help-2.8.2-1.el7, gimp-libs-2:2.8.16-3.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) gimp-devel-2:2.8.16-3.el7, gimp-devel-tools-2:2.8.16-3.el7, gimp-help-ca-2.8.2-1.el7 +16
Fixes 1 record
Priority MEDIUM 40
Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.03113 · Published 2016-07-12 · Partial fix CWE-416
