Описание
Security update for gimp
This update for gimp fixes the following issues:
Changes in gimp:
- CVE-2026-58379: Fix PSP File Parsing Heap Buffer Overflow (bsc#1270299)
- CVE-2026-58380: Fix buffer overflow in pnmscanner_gettoken (bsc#1270444)
- CVE-2026-58381: Prevent double-freeing PSP layer name (bsc#1270239)
Список пакетов
openSUSE Leap 16.0
Ссылки
- SUSE Security Ratings
- SUSE Bug 1270239
- SUSE Bug 1270299
- SUSE Bug 1270444
- SUSE CVE CVE-2026-58379 page
- SUSE CVE CVE-2026-58380 page
- SUSE CVE CVE-2026-58381 page
Описание
A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service (DoS) by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the software incorrectly calculates buffer sizes when processing low bit-depth images, leading to an overwrite of adjacent memory.
Затронутые продукты
Ссылки
- CVE-2026-58379
- SUSE Bug 1270299
Описание
A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.
Затронутые продукты
Ссылки
- CVE-2026-58380
- SUSE Bug 1270444
Описание
A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.
Затронутые продукты
Ссылки
- CVE-2026-58381
- SUSE Bug 1270239