(RHSA-2024:0861) Important: gimp:2.8 security update

2024-02-1914:02:39

access.redhat.com

gimp software

image manipulation

buffer overflow

remote code execution

7.7 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%

JSON

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

gimp: PSD buffer overflow RCE (CVE-2023-44442)
gimp: psp off-by-one RCE (CVE-2023-44444)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyaarch64pygobject2-debuginfo< 2.28.7-4.module+el8.9.0+21228+8e80d31dpygobject2-debuginfo-2.28.7-4.module+el8.9.0+21228+8e80d31d.aarch64.rpm
RedHatanyaarch64pygtk2-codegen< 2.24.0-25.module+el8.9.0+21228+8e80d31dpygtk2-codegen-2.24.0-25.module+el8.9.0+21228+8e80d31d.aarch64.rpm
RedHatanyx86_64gimp< 2.8.22-25.module+el8.9.0+21239+e25d5ab1gimp-2.8.22-25.module+el8.9.0+21239+e25d5ab1.x86_64.rpm
RedHatanyx86_64pygobject2-doc< 2.28.7-4.module+el8.9.0+21228+8e80d31dpygobject2-doc-2.28.7-4.module+el8.9.0+21228+8e80d31d.x86_64.rpm
RedHatanyppc64lepygobject2-debugsource< 2.28.7-4.module+el8.9.0+21228+8e80d31dpygobject2-debugsource-2.28.7-4.module+el8.9.0+21228+8e80d31d.ppc64le.rpm
RedHatanyppc64lepython2-pycairo-debugsource< 1.16.3-6.module+el8.9.0+21228+8e80d31dpython2-pycairo-debugsource-1.16.3-6.module+el8.9.0+21228+8e80d31d.ppc64le.rpm
RedHatanyx86_64python2-cairo-devel< 1.16.3-6.module+el8.9.0+21228+8e80d31dpython2-cairo-devel-1.16.3-6.module+el8.9.0+21228+8e80d31d.x86_64.rpm
RedHatanyx86_64pygobject2-codegen< 2.28.7-4.module+el8.9.0+21228+8e80d31dpygobject2-codegen-2.28.7-4.module+el8.9.0+21228+8e80d31d.x86_64.rpm
RedHatanys390xgimp< 2.8.22-25.module+el8.9.0+21239+e25d5ab1gimp-2.8.22-25.module+el8.9.0+21239+e25d5ab1.s390x.rpm
RedHatanyppc64legimp-libs< 2.8.22-25.module+el8.9.0+21239+e25d5ab1gimp-libs-2.8.22-25.module+el8.9.0+21239+e25d5ab1.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	aarch64	pygobject2-debuginfo	< 2.28.7-4.module+el8.9.0+21228+8e80d31d	pygobject2-debuginfo-2.28.7-4.module+el8.9.0+21228+8e80d31d.aarch64.rpm
RedHat	any	aarch64	pygtk2-codegen	< 2.24.0-25.module+el8.9.0+21228+8e80d31d	pygtk2-codegen-2.24.0-25.module+el8.9.0+21228+8e80d31d.aarch64.rpm
RedHat	any	x86_64	gimp	< 2.8.22-25.module+el8.9.0+21239+e25d5ab1	gimp-2.8.22-25.module+el8.9.0+21239+e25d5ab1.x86_64.rpm
RedHat	any	x86_64	pygobject2-doc	< 2.28.7-4.module+el8.9.0+21228+8e80d31d	pygobject2-doc-2.28.7-4.module+el8.9.0+21228+8e80d31d.x86_64.rpm
RedHat	any	ppc64le	pygobject2-debugsource	< 2.28.7-4.module+el8.9.0+21228+8e80d31d	pygobject2-debugsource-2.28.7-4.module+el8.9.0+21228+8e80d31d.ppc64le.rpm
RedHat	any	ppc64le	python2-pycairo-debugsource	< 1.16.3-6.module+el8.9.0+21228+8e80d31d	python2-pycairo-debugsource-1.16.3-6.module+el8.9.0+21228+8e80d31d.ppc64le.rpm
RedHat	any	x86_64	python2-cairo-devel	< 1.16.3-6.module+el8.9.0+21228+8e80d31d	python2-cairo-devel-1.16.3-6.module+el8.9.0+21228+8e80d31d.x86_64.rpm
RedHat	any	x86_64	pygobject2-codegen	< 2.28.7-4.module+el8.9.0+21228+8e80d31d	pygobject2-codegen-2.28.7-4.module+el8.9.0+21228+8e80d31d.x86_64.rpm
RedHat	any	s390x	gimp	< 2.8.22-25.module+el8.9.0+21239+e25d5ab1	gimp-2.8.22-25.module+el8.9.0+21239+e25d5ab1.s390x.rpm
RedHat	any	ppc64le	gimp-libs	< 2.8.22-25.module+el8.9.0+21239+e25d5ab1	gimp-libs-2.8.22-25.module+el8.9.0+21239+e25d5ab1.ppc64le.rpm