Lucene search

K
oraclelinuxOracleLinuxELSA-2016-2589
HistoryNov 09, 2016 - 12:00 a.m.

gimp security, bug fix, and enhancement update

2016-11-0900:00:00
linux.oracle.com
18

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.843 High

EPSS

Percentile

98.2%

gimp
[2:2.8.16-3]

  • fix multiple use-after-free bugs when parsing XCF channel and layer
    properties (#1348617)
    [2:2.8.16-2]
  • add back obsoletes necessary for RHEL
    [2:2.8.16-1]
  • version 2.8.16
    [2:2.8.14-3]
  • export-dialog-destroyed-crash patch: avoid subsequent warnings
    [2:2.8.14-2]
  • fix linking problem
  • use %buildroot macro consistently again
    [2:2.8.14-2]
  • avoid destroying dialog and occasional crashes while exporting (#1215905)
    [2:2.8.14-1.2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
    [2:2.8.14-1.1]
  • Use better AppData screenshots
    [2:2.8.14-1]
  • version 2.8.14
    [2:2.8.10-6.2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
  • update source URL
    [2:2.8.10-6.1]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
    [2:2.8.10-6]
  • remove ancient obsoletes (#1002109)
    [2:2.8.10-5]
  • cope with freetype >= 2.5.1 include madness
    [2:2.8.10-5]
  • remove BRs contained in the minimal build environment
  • group BRs into libraries and tools
  • remove various old cruft
  • ship RPM macros for packaging plug-ins e.a. (#1063144)
    [2:2.8.10-4]
  • avoid buffer overflows in file-xwd plug-in (CVE-2013-1913, CVE-2013-1978)
    gimp-help
    [2.8.2-1]
  • version 2.8.2
  • use %global instead of %define
  • fix website and source URLs

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.843 High

EPSS

Percentile

98.2%