Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| gimp | fixed | 3.2.4-1 | package |
Примечания
https://gitlab.gnome.org/GNOME/gimp/-/work_items/16221
Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/496e9d4f507230c3bbe1c4fe4e1e9c785641d55b (GIMP_3_2_4)
Связанные уязвимости
CVSS3: 7.3
redhat
4 месяца назад
A flaw was found in GIMP's PVR decoder. A heap-based out-of-bounds write occurs in pvr_decode_compressed() because the Y-axis loop uses width / 2 instead of height / 2, allowing crafted non-square textures to write past the destination buffer. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.