Release date:
2026-09-03 09:29:27 UTC
Description:
- CVE-2026-82328: fix heap out-of-bounds read in the ICO loader by bounding
the used_clrs palette-size field to the maximum colors for the image bit
depth and allocating the palette using that bound instead of the
untrusted header value
Updated packages:
-
gimp-2.99.8-4.el9.2.tuxcare.els18.x86_64.rpm
sha:16885e0b453f2d229b6adcba0d74f2b90e5a93ac04143385ad8551eef922bafc
-
gimp-devel-2.99.8-4.el9.2.tuxcare.els18.x86_64.rpm
sha:aa9003ccb6688091e47824c8f32ee440143d2c1c95ab15a6d188d3780b2ab934
-
gimp-devel-tools-2.99.8-4.el9.2.tuxcare.els18.x86_64.rpm
sha:c7355df4b645e51d11f95140435069d8a62095739914d95582ef4cf6a5384e9e
-
gimp-libs-2.99.8-4.el9.2.tuxcare.els18.i686.rpm
sha:70b6b8b1a2cb7561b61917d0ddfb747cc08dd9ae654a5a933e067d38d8e1ca9a
-
gimp-libs-2.99.8-4.el9.2.tuxcare.els18.x86_64.rpm
sha:41905664455dfec1b71c255e23b80662263b05889756d546348a8dd44c7214e9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
