Lucene search

K
rockyRockylinux Product ErrataRLSA-2024:0675
HistoryMay 10, 2024 - 2:32 p.m.

gimp security update

2024-05-1014:32:42
Rockylinux Product Errata
errata.rockylinux.org
4
gimp
security update
rce
rocky linux 9
cve

7.8 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

15.8%

An update is available for gimp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

  • gimp: dds buffer overflow RCE (CVE-2023-44441)

  • gimp: PSD buffer overflow RCE (CVE-2023-44442)

  • gimp: psp integer overflow RCE (CVE-2023-44443)

  • gimp: psp off-by-one RCE (CVE-2023-44444)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.