Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2026-5586

Высокий

ALT-PU-2026-5586: package gimp update to version 3.2.2-alt1

Источник
errata.altlinux.org
Дата публикации
03.04.2026
Дата обновления
25.09.2026
Устраненные уязвимости
3

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades gimp to version 3.2.2-alt1.

Устраненные уязвимости3

Связанные уязвимости

CVSS3: 7.3
ubuntu
4 месяца назад

A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.

CVSS3: 6.1
redhat
7 месяцев назад

A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.

CVSS3: 7.3
nvd
4 месяца назад

A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.

CVSS3: 7.3
debian
4 месяца назад

A flaw was found in GIMP's PSP file format parser. A double-free condi ...

CVSS3: 8.8
ubuntu
больше 1 года назад

GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ICO files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26752.