CVE-2021-45463

GEGL load_cache in GEGL before 0.4.34 allows shell expansion via a crafted path in a constructed command, caused by using the system() execution path in magick-load. This can lead to arbitrary command execution or impact availability/integrity depending on the environment; reports reference vulne...

CVE-2021-45463

loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...

CVE-2021-45463

loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...

GIMP 操作系统命令注入漏洞

GIMP is an open source bitmap image editor from the GIMP team. GIMP suffers from an operating system command injection vulnerability that stems from allowing shell extensions when pathnames in constructed command lines are not escaped or filtered. This is caused by performing an ImageMagick...

python27:2.7 security and bug fix update

python2 2.7.18-4.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 2.7.18-4 - Security fix for CVE-2021-3177 Resolves: rhbz1919163 2.7.18-3 - Fixes for bundling prefix=/app build in gimp/inkscape containers Resolves: rhbz1907592 2.7.18-2 - Security fix for CVE-2020-26116: Reject...

openSUSE: Security Advisory for gimp (openSUSE-SU-2021:0027-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : gimp (openSUSE-2021-27)

This update for gimp fixes the following issues : - CVE-2017-17784: Fixed an insufficient string validation for input names bsc1073624. - CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625. - CVE-2017-17786: Fixed an out-of-bounds read in TGA bsc1073626. This update was...

openSUSE Security Update : gimp (openSUSE-2020-2357)

This update for gimp fixes the following issues : Security issue fixed : - CVE-2017-17787: Fixed an out-of-bounds read in the PSP importer bsc1073628. Non-security issue fixed : - Fixed a software crash while importing a PostScript file bsc1178726. This update was imported from the...

OPENSUSE-SU-2021:0027-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2017-17784: Fixed an insufficient string validation for input names bsc1073624. - CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625. - CVE-2017-17786: Fixed an out-of-bounds read in TGA bsc1073626. This update was...

Security update for gimp (moderate)

openSUSE Security Update: Security update for gimp Announcement ID: openSUSE-SU-2021:0027-1 Rating: moderate References: 1073624 1073625 1073626 Cross-References: CVE-2017-17784 CVE-2017-17785 CVE-2017-17786 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities is now...

SUSE-SU-2021:0015-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2017-17784: Fixed an insufficient string validation for input names bsc1073624. - CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625. - CVE-2017-17786: Fixed an out-of-bounds read in TGA bsc1073626...

SUSE-SU-2021:0014-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2017-17784: Fixed an insufficient string validation for input names bsc1073624. - CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625. - CVE-2017-17786: Fixed an out-of-bounds read in TGA bsc1073626...

SUSE-SU-2020:3944-1 Security update for gimp

This update for gimp fixes the following issue: - CVE-2017-17787: Fixed an out-of-bounds read in the PSP importer bsc1073628...

OPENSUSE-SU-2020:2357-1 Security update for gimp

This update for gimp fixes the following issues: Security issue fixed: - CVE-2017-17787: Fixed an out-of-bounds read in the PSP importer bsc1073628. Non-security issue fixed: - Fixed a software crash while importing a PostScript file bsc1178726. This update was imported from the SUSE:SLE-15:Updat...

SUSE-SU-2020:3940-1 Security update for gimp

This update for gimp fixes the following issues: Security issue fixed: - CVE-2017-17787: Fixed an out-of-bounds read in the PSP importer bsc1073628. Non-security issue fixed: - Fixed a software crash while importing a PostScript file bsc1178726...

Security update for gimp (important)

openSUSE Security Update: Security update for gimp Announcement ID: openSUSE-SU-2020:2357-1 Rating: important References: 1073628 1178726 Cross-References: CVE-2017-17787 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available. Description...

libwmf security update

CentOS Errata and Security Advisory CESA-2020:3943 An update for libwmf is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Important: Red Hat Security Advisory: spice and spice-gtk security update

An update for spice and spice-gtk is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Low: Red Hat Security Advisory: libwmf security and bug fix update

An update for libwmf is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Denial Of Service (DoS)

gimp is vulnerable to denial of service DoS. The vulnerability exists through a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no \0 character after the version string...