CLSA-2026-1788774195
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788774195.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1788774195
- Upstream
- Published
- 2026-09-07T09:43:31Z
- Modified
- 2026-10-26T09:30:45Z
- Summary
- gimp: Fix of 7 CVEs
- Details
-
- CVE-2026-18301: validate the PSD channel data allocation with a checked multiplication and fail cleanly instead of overflowing the raw_data buffer
- CVE-2026-18302: pass the correct row stride to convert_int2uint() when loading separate-plane TIFFs so the conversion cannot write past the end of the heap-allocated row buffer
- CVE-2026-18303: reject indexed TIFFs whose bit depth implies a color map larger than 256 entries instead of overrunning the 768-byte stack cmap
- CVE-2026-18304: compute the TIFF upscale tile area as gsize and use a checked allocation so an integer overflow cannot undersize bw_buffer
- CVE-2026-18305: use checked multiplications for the TIFF RGBA image allocation instead of an overflowing width times height product
- CVE-2026-18306: reject SGI files whose bits-per-pixel is outside the supported range of 1 to 2 and cast the SGI row pointer arithmetic to gsize so an integer overflow cannot lead to an out-of-bounds write
- CVE-2026-18307: derive the TIFF bytes-per-pixel consistency check from the source babl format so a samples-per-pixel below the photometric setting cannot undercount the buffer size, and size the contiguous tile buffer with checked multiplications instead of trusting TIFFTileSize()
- References
-
- https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1788774195.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-18301
- https://nvd.nist.gov/vuln/detail/CVE-2026-18302
- https://nvd.nist.gov/vuln/detail/CVE-2026-18303
- https://nvd.nist.gov/vuln/detail/CVE-2026-18304
- https://nvd.nist.gov/vuln/detail/CVE-2026-18305
- https://nvd.nist.gov/vuln/detail/CVE-2026-18306
- https://nvd.nist.gov/vuln/detail/CVE-2026-18307
Affected packages
TuxCare:AlmaLinux:9.2 / gimp
Package
- Name
- gimp
- Purl
- pkg:rpm/tuxcare/gimp?distro=almalinux-9.2
TuxCare:AlmaLinux:9.2 / gimp-devel
Package
- Name
- gimp-devel
- Purl
- pkg:rpm/tuxcare/gimp-devel?distro=almalinux-9.2
TuxCare:AlmaLinux:9.2 / gimp-devel-tools
Package
- Name
- gimp-devel-tools
- Purl
- pkg:rpm/tuxcare/gimp-devel-tools?distro=almalinux-9.2