openSUSE-SU-2021:0027-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:0027-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2021:0027-1
Related
Published
2021-01-07T17:24:51Z
Modified
2021-01-07T17:24:51Z
Summary
Security update for gimp
Details

This update for gimp fixes the following issues:

  • CVE-2017-17784: Fixed an insufficient string validation for input names (bsc#1073624).
  • CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import (bsc#1073625).
  • CVE-2017-17786: Fixed an out-of-bounds read in TGA (bsc#1073626).

This update was imported from the SUSE:SLE-15:Update update project.

References

Affected packages

openSUSE:Leap 15.1 / gimp

Package

Name
gimp
Purl
pkg:rpm/opensuse/gimp&distro=openSUSE%20Leap%2015.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.8.22-lp151.5.9.1

Ecosystem specific 

{
    "binaries": [
        {
            "gimp-devel": "2.8.22-lp151.5.9.1",
            "libgimpui-2_0-0-32bit": "2.8.22-lp151.5.9.1",
            "gimp-lang": "2.8.22-lp151.5.9.1",
            "gimp-plugin-aa": "2.8.22-lp151.5.9.1",
            "libgimpui-2_0-0": "2.8.22-lp151.5.9.1",
            "gimp-plugins-python": "2.8.22-lp151.5.9.1",
            "libgimp-2_0-0-32bit": "2.8.22-lp151.5.9.1",
            "gimp": "2.8.22-lp151.5.9.1",
            "libgimp-2_0-0": "2.8.22-lp151.5.9.1"
        }
    ]
}