MGASA-2023-0346

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2023-0346.html

Import Source

https://advisories.mageia.org/MGASA-2023-0346.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2023-0346

Related

CVE-2023-44441
CVE-2023-44442
CVE-2023-44443
CVE-2023-44444

Published

2023-12-15T17:57:51Z

Modified

2023-12-16T14:33:27Z

Summary

Updated gimp packages fix security vulnerabilities

Details

GIMP has been updated to version 2.10.36 to fix several security issues. CVE-2023-44441: GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-44442: GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-44443: GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability CVE-2023-44444: GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability

References

https://advisories.mageia.org/MGASA-2023-0346.html
https://bugs.mageia.org/show_bug.cgi?id=32548
https://www.openwall.com/lists/oss-security/2023/11/20/3

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

MGASA-2023-0346

Affected packages