CentOS ProjectCESA-2006:0598gimp security update
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.5%
CentOS Errata and Security Advisory CESA-2006:0598
The GIMP (GNU Image Manipulation Program) is an image composition and
editing program.
Henning Makholm discovered a buffer overflow bug in The GIMP XCF file
loader. An attacker could create a carefully crafted image that could
execute arbitrary code if opened by a victim. (CVE-2006-3404)
Please note that this issue did not affect the gimp packages in Red Hat
Enterprise Linux 2.1, or 3.
Users of The GIMP should update to these erratum packages which contain a
backported fix to correct this issue.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2006-July/075194.html
https://lists.centos.org/pipermail/centos-announce/2006-July/075199.html
https://lists.centos.org/pipermail/centos-announce/2006-July/075200.html
https://lists.centos.org/pipermail/centos-announce/2006-July/075201.html
https://lists.centos.org/pipermail/centos-announce/2006-July/075208.html
Affected packages:
gimp
gimp-devel
Upstream details at:
https://access.redhat.com/errata/RHSA-2006:0598
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| CentOS | 4 | ia64 | gimp | < 2.0.5-6 | gimp-2.0.5-6.ia64.rpm |
| CentOS | 4 | ia64 | gimp-devel | < 2.0.5-6 | gimp-devel-2.0.5-6.ia64.rpm |
| CentOS | 4 | alpha | gimp | < 2.0.5-6 | gimp-2.0.5-6.alpha.rpm |
| CentOS | 4 | alpha | gimp-devel | < 2.0.5-6 | gimp-devel-2.0.5-6.alpha.rpm |
| CentOS | 4 | i386 | gimp | < 2.0.5-6 | gimp-2.0.5-6.i386.rpm |
| CentOS | 4 | i386 | gimp-devel | < 2.0.5-6 | gimp-devel-2.0.5-6.i386.rpm |
| CentOS | 4 | x86_64 | gimp | < 2.0.5-6 | gimp-2.0.5-6.x86_64.rpm |
| CentOS | 4 | x86_64 | gimp-devel | < 2.0.5-6 | gimp-devel-2.0.5-6.x86_64.rpm |
| CentOS | 4 | s390 | gimp | < 2.0.5-6 | gimp-2.0.5-6.s390.rpm |
| CentOS | 4 | s390 | gimp-devel | < 2.0.5-6 | gimp-devel-2.0.5-6.s390.rpm |
Related
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.5%