Release date:
2026-09-03 09:55:15 UTC
Description:
- CVE-2026-82328: fix heap out-of-bounds read in the ICO loader by bounding
the used_clrs palette-size field to the maximum colors for the image bit
depth and allocating the palette using that bound instead of the
untrusted header value
Updated packages:
-
gimp-2.99.8-4.el9_6.2.tuxcare.els18.x86_64.rpm
sha:e1db914a4f86db920b41469651ae32978d40cd45e619378c44ff416b014f9b29
-
gimp-devel-2.99.8-4.el9_6.2.tuxcare.els18.x86_64.rpm
sha:79b67e6653ba410f9c52ad7d228882b5a541f73e4fe2c6f5955f2a672eb63eef
-
gimp-devel-tools-2.99.8-4.el9_6.2.tuxcare.els18.x86_64.rpm
sha:8d6b76d11a45c4b7a9612f369c31c73dbb71cdb5fda6c93b26659c059139279a
-
gimp-libs-2.99.8-4.el9_6.2.tuxcare.els18.i686.rpm
sha:f72e3bac3abb04a4dffc4919d66c322792a436ae84a94088f8ef8cd5b11ec677
-
gimp-libs-2.99.8-4.el9_6.2.tuxcare.els18.x86_64.rpm
sha:70634aae33319576ea25e342fdb953414bf02727c7ab40ec02ad8e89dbd833d0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
