[CLSA-2025:1765012494] gimp: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2025-12-06 09:14:57 UTC
Description:
- CVE-2025-10922: fix heap-based buffer overflow in DCM file parser by adding safety checks and proper GError handling to prevent potential RCE - CVE-2025-10934: fix heap-based buffer overflow in XWD file parser by validating colormap offsets to prevent potential RCE
Updated packages:
  • gimp-2.99.8-3.el9.tuxcare.els8.x86_64.rpm
    sha:8eb7c5482faa4d9234875ffff9c56525a83a81e0125f96e1f90419b165f2e95b
  • gimp-devel-2.99.8-3.el9.tuxcare.els8.x86_64.rpm
    sha:e93f40a8c8aaaf7c96d73201bd4a951717718fcec4f5ebf18ee0e95bedc670e3
  • gimp-devel-tools-2.99.8-3.el9.tuxcare.els8.x86_64.rpm
    sha:3f70172f5d60d328cffadf55d3e044ce80723226c99e3eaec6ff5d36bcffc4f0
  • gimp-libs-2.99.8-3.el9.tuxcare.els8.i686.rpm
    sha:02983f26423134de4720de9b8fd3bd449852afb0a724eddee496bfa2c80744d2
  • gimp-libs-2.99.8-3.el9.tuxcare.els8.x86_64.rpm
    sha:63338da88f0fd4b597b86bec8a981fa81f6f02446712a93094451a397c1ee7dc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.