openSUSE: Security Advisory for gimp (openSUSE-SU-2021:0027-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : gimp (openSUSE-2021-27)

This update for gimp fixes the following issues : - CVE-2017-17784: Fixed an insufficient string validation for input names bsc1073624. - CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625. - CVE-2017-17786: Fixed an out-of-bounds read in TGA bsc1073626. This update was...

openSUSE Security Update : gimp (openSUSE-2020-2357)

This update for gimp fixes the following issues : Security issue fixed : - CVE-2017-17787: Fixed an out-of-bounds read in the PSP importer bsc1073628. Non-security issue fixed : - Fixed a software crash while importing a PostScript file bsc1178726. This update was imported from the...

OPENSUSE-SU-2021:0027-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2017-17784: Fixed an insufficient string validation for input names bsc1073624. - CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625. - CVE-2017-17786: Fixed an out-of-bounds read in TGA bsc1073626. This update was...

Security update for gimp (moderate)

openSUSE Security Update: Security update for gimp Announcement ID: openSUSE-SU-2021:0027-1 Rating: moderate References: 1073624 1073625 1073626 Cross-References: CVE-2017-17784 CVE-2017-17785 CVE-2017-17786 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities is now...

SUSE-SU-2021:0015-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2017-17784: Fixed an insufficient string validation for input names bsc1073624. - CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625. - CVE-2017-17786: Fixed an out-of-bounds read in TGA bsc1073626...

SUSE-SU-2021:0014-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2017-17784: Fixed an insufficient string validation for input names bsc1073624. - CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625. - CVE-2017-17786: Fixed an out-of-bounds read in TGA bsc1073626...

SUSE-SU-2020:3944-1 Security update for gimp

This update for gimp fixes the following issue: - CVE-2017-17787: Fixed an out-of-bounds read in the PSP importer bsc1073628...

OPENSUSE-SU-2020:2357-1 Security update for gimp

This update for gimp fixes the following issues: Security issue fixed: - CVE-2017-17787: Fixed an out-of-bounds read in the PSP importer bsc1073628. Non-security issue fixed: - Fixed a software crash while importing a PostScript file bsc1178726. This update was imported from the SUSE:SLE-15:Updat...

SUSE-SU-2020:3940-1 Security update for gimp

This update for gimp fixes the following issues: Security issue fixed: - CVE-2017-17787: Fixed an out-of-bounds read in the PSP importer bsc1073628. Non-security issue fixed: - Fixed a software crash while importing a PostScript file bsc1178726...

Security update for gimp (important)

openSUSE Security Update: Security update for gimp Announcement ID: openSUSE-SU-2020:2357-1 Rating: important References: 1073628 1178726 Cross-References: CVE-2017-17787 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available. Description...

libwmf security update

CentOS Errata and Security Advisory CESA-2020:3943 An update for libwmf is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Important: Red Hat Security Advisory: spice and spice-gtk security update

An update for spice and spice-gtk is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Low: Red Hat Security Advisory: libwmf security and bug fix update

An update for libwmf is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Denial Of Service (DoS)

gimp is vulnerable to denial of service DoS. The vulnerability exists through a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no \0 character after the version string...

Buffer Over-read

GIMP is vulnerable to a heap-based buffer over-read. It is due to a flaw in loadimage in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data...

Heap Buffer Overflow

GIMP is vulnerable to a heap-based buffer overflow in the flireadbrun function in plug-ins/file-fli/fli.c...

Arbitrary Code Execution

GIMP is vulnerable to arbitrary code execution. A heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c allows an attacker to execute arbitrary code via a malicious bits-per-pixel value for an RGBA image...

Arbitrary Code Execution

gimp is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer overflow in readchanneldata in plug-ins/common/file-psp.c...

Arbtirary Code Execution

GIMP is vulnerable to arbitrary code execution. A heap-based buffer over-read in the function readcreatorblock in plug-ins/common/file-psp.c allows an attacker to execute arbitrary code on the host OS...