CVE-2018-10112

An issue was discovered in GEGL through 0.3.32. The gegltilebackendswapconstructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service write access violation or possibly have unspecified other impact via a malformed PNG file that is mishandled during a...

UBUNTU-CVE-2018-10111

An issue was discovered in GEGL through 0.3.32. The renderrectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service application crash upon allocation failure...

UBUNTU-CVE-2018-10114

An issue was discovered in GEGL through 0.3.32. The geglbufferiteratereadsimple function in buffer/gegl-buffer-access.c allows remote attackers to cause a denial of service write access violation or possibly have unspecified other impact via a malformed PPM file, related to improper restrictions ...

GEGL Denial of Service Vulnerability (CNVD-2018-08256)

GEGL is a data stream based image processing framework. The framework provides floating point processing and lossless image processing for projects such as the GNU Image Manipulation Program. A security vulnerability exists in GEGL 0.3.32 and earlier versions, which stems from a failure of the...

GEGL Denial of Service Vulnerability (CNVD-2018-08259)

GEGL is a data stream based image processing framework. The framework provides floating point processing and lossless image processing for projects such as the GNU Image Manipulation Program. A security vulnerability exists in GEGL 0.3.32 and earlier versions, which stems from the failure of the...

GEGL Denial of Service Vulnerability

GEGL is a data stream based image processing framework. The framework provides floating point processing and lossless image processing for projects such as the GNU Image Manipulation Program. A security vulnerability in the 'geglbufferiteratereadsimple' function in the buffer/gegl-buffer-access.c...

GEGL Denial of Service Vulnerability (CNVD-2018-08258)

GEGL is a data stream based image processing framework. The framework provides floating point processing and lossless image processing for projects such as the GNU Image Manipulation Program. A security vulnerability exists in the 'gegltilebackendswapconstructed' function in the...

CVE-2018-10111

GEGL up to version 0.3.32 contains a vulnerability in render_rectangle (process/gegl-processor.c) where unbounded memory allocation can cause a denial of service (application crash) on allocation failure. This is the root cause described across multiple connected sources (e.g., RH/Nessus/NVD/ROS ...

CVE-2018-10112

An issue was discovered in GEGL through 0.3.32. The gegltilebackendswapconstructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service write access violation or possibly have unspecified other impact via a malformed PNG file that is mishandled during a...

CVE-2018-10112

CVE-2018-10112 affects GEGL up to 0.3.32. The vulnerability resides in gegl_tile_backend_swap_constructed (buffer/gegl-tile-backend-swap.c), which can be triggered by a malformed PNG file and mishandling in babl_format_get_bytes_per_pixel (babl 0.1.46). Reported impact is a denial of service (wri...

CVE-2018-10111

An issue was discovered in GEGL through 0.3.32. The renderrectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service application crash upon allocation failure...

CVE-2018-10113

An issue was discovered in GEGL through 0.3.32. The process function in operations/external/ppm-load.c has unbounded memory allocation, leading to a denial of service application crash upon allocation failure...

CVE-2018-10111

An issue was discovered in GEGL through 0.3.32. The renderrectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service application crash upon allocation failure...

CVE-2018-10113

An issue was discovered in GEGL through 0.3.32. The process function in operations/external/ppm-load.c has unbounded memory allocation, leading to a denial of service application crash upon allocation failure...

CVE-2018-10114

An issue was discovered in GEGL through 0.3.32. The geglbufferiteratereadsimple function in buffer/gegl-buffer-access.c allows remote attackers to cause a denial of service write access violation or possibly have unspecified other impact via a malformed PPM file, related to improper restrictions ...

CVE-2018-10114

An issue was discovered in GEGL through 0.3.32. The geglbufferiteratereadsimple function in buffer/gegl-buffer-access.c allows remote attackers to cause a denial of service write access violation or possibly have unspecified other impact via a malformed PPM file, related to improper restrictions ...

CVE-2018-10112

An issue was discovered in GEGL through 0.3.32. The gegltilebackendswapconstructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service write access violation or possibly have unspecified other impact via a malformed PNG file that is mishandled during a...

CVE-2018-10113

CVE-2018-10113 concerns GEGL prior to 0.3.32. The issue is in the process function of operations/external/ppm-load.c, where unbounded memory allocation can lead to denial of service via application crash when allocation fails. Documents confirm this CVE and its impact; other sources reference unp...

CVE-2018-10114

Summary: CVE-2018-10114 affects GEGL up to 0.3.32. The vulnerability is in the function gegl_buffer_iterate_read_simple (buffer/gegl-buffer-access.c), where malformed PPM files and improper memory allocation restrictions in ppm_load_read_header (operations/external/ppm-load.c) can allow a remote ...

[slackware-security] gegl

New gegl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/gegl-0.2.0-i586-4slack14.2.txz: Rebuilt. Patched integer overflows in operations/external/ppm-load.c that could allow a...