ALSA-2024:0861

See a problem?
Please try reporting it to the source first.

Source

https://errata.almalinux.org/8/ALSA-2024-0861.html

Import Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2024:0861.json

JSON Data

https://api.osv.dev/v1/vulns/ALSA-2024:0861

Related

Published

2024-02-19T00:00:00Z

Modified

2024-02-22T20:14:15Z

Summary

Important: gimp:2.8 security update

Details

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

gimp: PSD buffer overflow RCE (CVE-2023-44442)
gimp: psp off-by-one RCE (CVE-2023-44444)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8 / gimp

Package

Name: gimp

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:2.8.22-25.module_el8.9.0+3725+d1441900

AlmaLinux:8 / gimp-devel

Package

Name: gimp-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:2.8.22-25.module_el8.9.0+3725+d1441900

AlmaLinux:8 / gimp-devel-tools

Package

Name: gimp-devel-tools

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:2.8.22-25.module_el8.9.0+3725+d1441900

AlmaLinux:8 / gimp-libs

Package

Name: gimp-libs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:2.8.22-25.module_el8.9.0+3725+d1441900

AlmaLinux:8 / pygobject2

Package

Name: pygobject2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.6.0+3053+ee77682c

AlmaLinux:8 / pygobject2

Package

Name: pygobject2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.5.0+17+826458aa

AlmaLinux:8 / pygobject2

Package

Name: pygobject2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.0.0+6039+48ed2b14

AlmaLinux:8 / pygobject2

Package

Name: pygobject2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.4.0+2208+3d7d61b2

AlmaLinux:8 / pygobject2-codegen

Package

Name: pygobject2-codegen

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.5.0+17+826458aa

AlmaLinux:8 / pygobject2-codegen

Package

Name: pygobject2-codegen

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.6.0+3053+ee77682c

AlmaLinux:8 / pygobject2-codegen

Package

Name: pygobject2-codegen

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.0.0+6039+48ed2b14

AlmaLinux:8 / pygobject2-codegen

Package

Name: pygobject2-codegen

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.4.0+2208+3d7d61b2

AlmaLinux:8 / pygobject2-devel

Package

Name: pygobject2-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.4.0+2208+3d7d61b2

AlmaLinux:8 / pygobject2-devel

Package

Name: pygobject2-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.5.0+17+826458aa

AlmaLinux:8 / pygobject2-devel

Package

Name: pygobject2-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.0.0+6039+48ed2b14

AlmaLinux:8 / pygobject2-devel

Package

Name: pygobject2-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.6.0+3053+ee77682c

AlmaLinux:8 / pygobject2-doc

Package

Name: pygobject2-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.5.0+17+826458aa

AlmaLinux:8 / pygobject2-doc

Package

Name: pygobject2-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.0.0+6039+48ed2b14

AlmaLinux:8 / pygobject2-doc

Package

Name: pygobject2-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.6.0+3053+ee77682c

AlmaLinux:8 / pygobject2-doc

Package

Name: pygobject2-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.7-4.module_el8.4.0+2208+3d7d61b2

AlmaLinux:8 / pygtk2

Package

Name: pygtk2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.0-25.module_el8.9.0+3725+d1441900

AlmaLinux:8 / pygtk2-codegen

Package

Name: pygtk2-codegen

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.0-25.module_el8.9.0+3725+d1441900

AlmaLinux:8 / pygtk2-devel

Package

Name: pygtk2-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.0-25.module_el8.9.0+3725+d1441900

AlmaLinux:8 / pygtk2-doc

Package

Name: pygtk2-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.0-25.module_el8.9.0+3725+d1441900

AlmaLinux:8 / python2-cairo

Package

Name: python2-cairo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.3-6.module_el8.5.0+17+826458aa

AlmaLinux:8 / python2-cairo

Package

Name: python2-cairo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.3-6.module_el8.4.0+2208+3d7d61b2

AlmaLinux:8 / python2-cairo

Package

Name: python2-cairo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.3-6.module_el8.6.0+3053+ee77682c

AlmaLinux:8 / python2-cairo

Package

Name: python2-cairo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.3-6.module_el8.0.0+6039+48ed2b14

AlmaLinux:8 / python2-cairo-devel

Package

Name: python2-cairo-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.3-6.module_el8.5.0+17+826458aa

AlmaLinux:8 / python2-cairo-devel

Package

Name: python2-cairo-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.3-6.module_el8.0.0+6039+48ed2b14

AlmaLinux:8 / python2-cairo-devel

Package

Name: python2-cairo-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.3-6.module_el8.6.0+3053+ee77682c

AlmaLinux:8 / python2-cairo-devel

Package

Name: python2-cairo-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.3-6.module_el8.4.0+2208+3d7d61b2