Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:1889-1

Опубликовано: 31 мая 2022
Источник: suse-cvrf

Описание

Security update for gimp

This update for gimp fixes the following issues:

  • CVE-2022-30067: Fixed uncontrolled memory consumption via crafted XCF file (bsc#1199653).

Список пакетов

SUSE Linux Enterprise Software Development Kit 12 SP5
gimp-devel-2.8.18-9.21.1
libgimp-2_0-0-2.8.18-9.21.1
libgimpui-2_0-0-2.8.18-9.21.1
SUSE Linux Enterprise Workstation Extension 12 SP5
gimp-2.8.18-9.21.1
gimp-lang-2.8.18-9.21.1
gimp-plugins-python-2.8.18-9.21.1
libgimp-2_0-0-2.8.18-9.21.1
libgimpui-2_0-0-2.8.18-9.21.1

Описание

GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:gimp-devel-2.8.18-9.21.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libgimp-2_0-0-2.8.18-9.21.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libgimpui-2_0-0-2.8.18-9.21.1
SUSE Linux Enterprise Workstation Extension 12 SP5:gimp-2.8.18-9.21.1

Ссылки
Уязвимость SUSE-SU-2022:1889-1