Simple DirectMedia Layer SDL2_image Code Execution Vulnerability

Simple DirectMedia Layer is a cross-platform development library that provides low-level access to audio, keyboard, mouse, and graphics hardware devices, etc. via OpenGL and Direct3D. A security vulnerability exists in the XCF image rendering feature in Simple DirectMedia Layer SDL2image-2.0.2. T...

Updated xv packages fix a security vulnerability

Updated xv package fixes DoS security vulnerability: It was discovered that png images created in gimp would crash xv...

MGASA-2018-0157 Updated xv packages fix a security vulnerability

Updated xv package fixes DoS security vulnerability: It was discovered that png images created in gimp would crash xv...

Simple DirectMedia Layer SDL2_image do_layer_surface Double-Free Vulnerability

Summary A double-Free vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a Double-Free situation to occur. An attacker can display a specially crafted image to trigger this vulnerability. Tested Versions Simple DirectMedia Lay...

Fedora Update for gimp FEDORA-2018-ccef1ced42

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 26 Update: gimp-2.8.22-3.fc26

GIMP GNU Image Manipulation Program is a powerful image composition and editing program, which can be extremely useful for creating logos and other graphics for webpages. GIMP has many of the tools and filters you would exp ect to find in similar commercial offerings, and some interesting extras ...

Ubuntu 14.04 LTS : GIMP vulnerabilities (USN-3539-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3539-1 advisory. It was discovered that GIMP incorrectly handled certain images. If a user were tricked into opening a specially crafted image, an attacker could possibly...

USN-3539-1 gimp vulnerabilities

It was discovered that GIMP incorrectly handled certain images. If a user were tricked into opening a specially crafted image, an attacker could possibly use this to execute arbitrary code. CVE-2017-17784, CVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17788, CVE-2017-17789...

USN-3539-1: GIMP vulnerabilities

It was discovered that GIMP incorrectly handled certain images. If a user were tricked into opening a specially crafted image, an attacker could possibly use this to execute arbitrary code. CVE-2017-17784, CVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17788, CVE-2017-17789...

EulerOS 2.0 SP1 : gimp (EulerOS-SA-2018-1022)

According to the versions of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In GIMP 2.8.22, there is a heap-based buffer over-read in loadimage in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling...

EulerOS 2.0 SP1 : libXcursor (EulerOS-SA-2018-1003)

According to the version of the libXcursor packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with...

EulerOS 2.0 SP2 : libXcursor (EulerOS-SA-2018-1004)

According to the version of the libXcursor packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with...

EulerOS 2.0 SP2 : gimp (EulerOS-SA-2018-1023)

According to the versions of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In GIMP 2.8.22, there is a heap-based buffer over-read in loadimage in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling...

Fedora 27 : 2:gimp (2018-67b75f73fa)

Security fix for CVE-2017-17784 CVE-2017-17785 CVE-2017-17786 CVE-2017-17787 CVE-2017-17788 CVE-2017-17789 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as...

[SECURITY] Fedora 27 Update: gimp-2.8.22-3.fc27

GIMP GNU Image Manipulation Program is a powerful image composition and editing program, which can be extremely useful for creating logos and other graphics for webpages. GIMP has many of the tools and filters you would exp ect to find in similar commercial offerings, and some interesting extras ...

openSUSE Security Update : gimp (openSUSE-2018-13)

This update for gimp fixes the following issues : - Don't build gimp with webkit1 support, as it is no longer maintained and has plenty of security bugs. This disables the GIMP's built-in help browser; it will use an external browser when configured this way. This works around a number of securit...

Fedora Update for gimp FEDORA-2018-67b75f73fa

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2018-0030 Updated gimp packages fix security vulnerability

Several vulnerabilities were discovered in the GIMP which could result in denial of service application crash or potentially the execution of arbitrary code if malformed files are opened CVE-2017-17784, CVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17788, CVE-2017-17789...

Updated gimp packages fix security vulnerability

Several vulnerabilities were discovered in the GIMP which could result in denial of service application crash or potentially the execution of arbitrary code if malformed files are opened CVE-2017-17784, CVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17788, CVE-2017-17789...

Debian DSA-4077-1 : gimp - security update

Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service application crash or potentially the execution of arbitrary code if malformed files are opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...