ALSA-2024:0861
ALSA-2024:0861 · Important: gimp:2.8 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: PSD buffer overflow RCE (CVE-2023-44442) * gimp: psp off-by-one RCE (CVE-2023-44444) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Stack: system
Affected products and versions
gimp AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2:2.8.22-25.module_el8.9.0+3725+d1441900
Update to 2:2.8.22-25.module_el8.9.0+3725+d1441900
gimp-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2:2.8.22-25.module_el8.9.0+3725+d1441900
Update to 2:2.8.22-25.module_el8.9.0+3725+d1441900
gimp-devel-tools AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2:2.8.22-25.module_el8.9.0+3725+d1441900
Update to 2:2.8.22-25.module_el8.9.0+3725+d1441900
gimp-libs AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2:2.8.22-25.module_el8.9.0+3725+d1441900
Update to 2:2.8.22-25.module_el8.9.0+3725+d1441900
pygobject2 AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.6.0+3053+ee77682c
Update to 2.28.7-4.module_el8.6.0+3053+ee77682c
pygobject2 AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.5.0+17+826458aa
Update to 2.28.7-4.module_el8.5.0+17+826458aa
pygobject2 AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.0.0+6039+48ed2b14
Update to 2.28.7-4.module_el8.0.0+6039+48ed2b14
pygobject2 AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.4.0+2208+3d7d61b2
Update to 2.28.7-4.module_el8.4.0+2208+3d7d61b2
pygobject2-codegen AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.5.0+17+826458aa
Update to 2.28.7-4.module_el8.5.0+17+826458aa
pygobject2-codegen AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.6.0+3053+ee77682c
Update to 2.28.7-4.module_el8.6.0+3053+ee77682c
pygobject2-codegen AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.0.0+6039+48ed2b14
Update to 2.28.7-4.module_el8.0.0+6039+48ed2b14
pygobject2-codegen AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.4.0+2208+3d7d61b2
Update to 2.28.7-4.module_el8.4.0+2208+3d7d61b2
pygobject2-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.4.0+2208+3d7d61b2
Update to 2.28.7-4.module_el8.4.0+2208+3d7d61b2
pygobject2-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.5.0+17+826458aa
Update to 2.28.7-4.module_el8.5.0+17+826458aa
pygobject2-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.0.0+6039+48ed2b14
Update to 2.28.7-4.module_el8.0.0+6039+48ed2b14
pygobject2-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.6.0+3053+ee77682c
Update to 2.28.7-4.module_el8.6.0+3053+ee77682c
pygobject2-doc AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.5.0+17+826458aa
Update to 2.28.7-4.module_el8.5.0+17+826458aa
pygobject2-doc AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.0.0+6039+48ed2b14
Update to 2.28.7-4.module_el8.0.0+6039+48ed2b14
pygobject2-doc AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.6.0+3053+ee77682c
Update to 2.28.7-4.module_el8.6.0+3053+ee77682c
pygobject2-doc AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.28.7-4.module_el8.4.0+2208+3d7d61b2
Update to 2.28.7-4.module_el8.4.0+2208+3d7d61b2
pygtk2 AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.24.0-25.module_el8.9.0+3725+d1441900
Update to 2.24.0-25.module_el8.9.0+3725+d1441900
pygtk2-codegen AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.24.0-25.module_el8.9.0+3725+d1441900
Update to 2.24.0-25.module_el8.9.0+3725+d1441900
pygtk2-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.24.0-25.module_el8.9.0+3725+d1441900
Update to 2.24.0-25.module_el8.9.0+3725+d1441900
pygtk2-doc AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.24.0-25.module_el8.9.0+3725+d1441900
Update to 2.24.0-25.module_el8.9.0+3725+d1441900
Original sources
- https://access.redhat.com/errata/RHSA-2024:0861
- https://access.redhat.com/security/cve/CVE-2023-44442
- https://access.redhat.com/security/cve/CVE-2023-44444
- https://bugzilla.redhat.com/2249942
- https://bugzilla.redhat.com/2249946
- https://errata.almalinux.org/8/ALSA-2024-0861.html
- https://osv.dev/vulnerability/ALSA-2024:0861