RHEL 5 : gimp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gimp: Use-after-free vulnerabilities in the channel and layer properties parsing process CVE-2016-4994 -...

gimp: Use-after-free vulnerabilities in the channel and layer properties parsing process

Multiple use-after-free vulnerabilities were found in GIMP in the channel and layer properties parsing process when loading XCF files. An attacker could create a specially crafted XCF file which could cause GIMP to crash...

gimp: arbitrary code execution

Multiple Use-After-Free when parsing XCF channel and layer properties...

[SECURITY] [DLA 525-1] gimp security update

Package : gimp Version : 2.8.2-2+deb7u2 CVE ID : CVE-2016-4994 It was discovered that there was a use-after-free vulnerability in the channel and layer properties parsing process in Gimp, the GNU Image Manipulation Program. For Debian 7 "Wheezy", this issue has been fixed in gimp version...