Skip to content
OpenAdvisories
Medium ELSA-2016-2589 1 CVE

Moderate: gimp security, bug fix, and enhancement update (Oracle Linux 7)

Published Nov 9, 2016 · Updated Nov 9, 2016

Summary

gimp
[2:2.8.16-3]
- fix multiple use-after-free bugs when parsing XCF channel and layer
properties (#1348617)

[2:2.8.16-2]
- add back obsoletes necessary for RHEL

[2:2.8.16-1]
- version 2.8.16

[2:2.8.14-3]
- export-dialog-destroyed-crash patch: avoid subsequent warnings

[2:2.8.14-2]
- fix linking problem
- use %buildroot macro consistently again

[2:2.8.14-2]
- avoid destroying dialog and occasional crashes while exporting (#1215905)

[2:2.8.14-1.2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2:2.8.14-1.1]
- Use better AppData screenshots

[2:2.8.14-1]
- version 2.8.14

[2:2.8.10-6.2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
- update source URL

[2:2.8.10-6.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[2:2.8.10-6]
- remove ancient obsoletes (#1002109)

[2:2.8.10-5]
- cope with freetype >= 2.5.1 include madness

[2:2.8.10-5]
- remove BRs contained in the minimal build environment
- group BRs into libraries and tools
- remove various old cruft
- ship RPM macros for packaging plug-ins e.a. (#1063144)

[2:2.8.10-4]
- avoid buffer overflows in file-xwd plug-in (CVE-2013-1913, CVE-2013-1978)

gimp-help
[2.8.2-1]
- version 2.8.2
- use %global instead of %define
- fix website and source URLs

Fixed packages 22

ReleasePackageFixed in
Oracle Linux · 7 gimp 2:2.8.16-3.el7
Oracle Linux · 7 gimp-devel 2:2.8.16-3.el7
Oracle Linux · 7 gimp-devel-tools 2:2.8.16-3.el7
Oracle Linux · 7 gimp-help 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-ca 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-da 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-de 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-el 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-en_GB 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-es 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-fr 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-it 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-ja 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-ko 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-nl 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-nn 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-pt_BR 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-ru 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-sl 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-sv 0:2.8.2-1.el7
Oracle Linux · 7 gimp-help-zh_CN 0:2.8.2-1.el7
Oracle Linux · 7 gimp-libs 2:2.8.16-3.el7

Vulnerabilities 1

  • Unscored —

    Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to ca…