Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| gimp | fixed | 3.2.4-1 | package | |
| gimp | not-affected | trixie | package | |
| gimp | not-affected | bookworm | package | |
| gimp | not-affected | bullseye | package |
Примечания
https://gitlab.gnome.org/GNOME/gimp/-/work_items/16221
Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/496e9d4f507230c3bbe1c4fe4e1e9c785641d55b (GIMP_3_2_4)
Introduced by: https://gitlab.gnome.org/GNOME/gimp/-/commit/96a9000169a11742cad88b6f945c12766cbf3f42 (GIMP_3_2_0)
Связанные уязвимости
CVSS3: 7.3
redhat
5 месяцев назад
A flaw was found in GIMP's PVR decoder. A heap-based out-of-bounds write occurs in pvr_decode_compressed() because the Y-axis loop uses width / 2 instead of height / 2, allowing crafted non-square textures to write past the destination buffer. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.