Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:21839-1

Опубликовано: 14 сент. 2026
Источник: suse-cvrf

Описание

Security update for gimp

This update for gimp fixes the following issues:

Changes in gimp:

  • CVE-2026-66757: Fixed signed integer overflow in file-sgi causes the plugin to crash when RLE-compressed SGI images are processed (bsc#1279838).

Список пакетов

openSUSE Leap 16.0
gimp-3.0.8-bp160.8.1
gimp-devel-3.0.8-bp160.8.1
gimp-extension-goat-excercises-3.0.8-bp160.8.1
gimp-lang-3.0.8-bp160.8.1
gimp-plugin-aa-3.0.8-bp160.8.1
gimp-plugin-python3-3.0.8-bp160.8.1
gimp-vala-3.0.8-bp160.8.1
libgimp-3_0-0-3.0.8-bp160.8.1
libgimpui-3_0-0-3.0.8-bp160.8.1

Ссылки

Описание

A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table. The image header dimensions (ysize and zsize) are read as 16-bit unsigned integers. If a crafted file sets both dimensions to their maximum value (65535), the multiplication ysize * zsize overflows the standard 32-bit int boundary before being passed to calloc. This integer overflow issue results in undefined behavior, aborting the plugin and causing a denial of service.

Затронутые продукты
openSUSE Leap 16.0:gimp-3.0.8-bp160.8.1
openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.8.1
openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.8.1
openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.8.1
Ссылки