Package "gimp-data"
Name: |
gimp-data
|
Description: |
Data files for GIMP
|
Latest version: |
2.10.34-1ubuntu0.23.10.1 |
Release: |
mantic (23.10) |
Level: |
updates |
Repository: |
universe |
Head package: |
gimp |
Homepage: |
https://www.gimp.org/ |
Links
Download "gimp-data"
Other versions of "gimp-data" in Mantic
Changelog
gimp (2.10.34-1ubuntu0.23.10.1) mantic-security; urgency=medium
* SECURITY UPDATE: DDS File Parsing Heap-based Buffer Overflow
- debian/patches/CVE-2023-44441-1.patch: verify header information in
plug-ins/file-dds/ddsread.c.
- debian/patches/CVE-2023-44441-2.patch: fix checks in
plug-ins/file-dds/ddsread.c.
- debian/patches/CVE-2023-44441-3.patch: add additional fixes in
plug-ins/file-dds/ddsread.c.
- CVE-2023-44441
* SECURITY UPDATE: PSD File Parsing Heap-based Buffer Overflow
- debian/patches/CVE-2023-44442.patch: add missing break statement in
plug-ins/file-psd/psd-util.c.
- CVE-2023-44442
* SECURITY UPDATE: PSP File Parsing Integer Overflow and Off-By-One
- debian/patches/CVE-2023-44443_44444.patch: check
color_palette_entries and fix buffer size in
plug-ins/common/file-psp.c.
- CVE-2023-44443
- CVE-2023-44444
-- Marc Deslauriers <email address hidden> Tue, 28 Nov 2023 08:59:52 -0500
|
CVE-2023-44441 |
GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
CVE-2023-44442 |
GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
CVE-2023-44443 |
GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability |
CVE-2023-44444 |
GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability |
|
About
-
Send Feedback to @ubuntu_updates