RHSA-2024:0862: Important: gimp:2.8 security update
Published Feb 19, 2024
·Updated
Important: gimp:2.8 security update
Other sources
The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.Security Fix(es): gimp: PSD buffer overflow RCE (CVE-2023-44442) gimp: psp off-by-one RCE (CVE-2023-44444) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
101 affected componentsFixes available
redhat/gimp<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/pygobject2<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygtk2<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/python2-pycairo<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/pygtk2-doc<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/gimp<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-debuginfo<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-debugsource<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-devel<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-devel-tools<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-devel-tools-debuginfo<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-libs<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-libs-debuginfo<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/pygobject2<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-codegen<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-debuginfo<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-debugsource<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-devel<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-doc<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygtk2<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-codegen<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-debuginfo<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-debugsource<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-devel<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/python2-cairo<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/python2-cairo-debuginfo<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/python2-cairo-devel<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/python2-pycairo-debugsource<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/gimp-debuginfo<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-debugsource<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-devel<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-devel-tools<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-devel-tools-debuginfo<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-libs<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-libs-debuginfo<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/pygobject2-codegen<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-debuginfo<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-debugsource<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-devel<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-doc<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygtk2-codegen<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-debuginfo<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-debugsource<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-devel<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/python2-cairo<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/python2-cairo-debuginfo<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/python2-cairo-devel<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/python2-pycairo-debugsource<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/gimp<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-debuginfo<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-debugsource<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-devel<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-devel-tools<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-devel-tools-debuginfo<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-libs<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/gimp-libs-debuginfo<2.8.22-25.module+el8.8.0+21240+7db4aa5a
2.8.22-25.module+el8.8.0+21240+7db4aa5a
redhat/pygobject2<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-codegen<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-debuginfo<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-debugsource<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-devel<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-doc<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygtk2<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-codegen<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-debuginfo<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-debugsource<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-devel<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/python2-cairo<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/python2-cairo-debuginfo<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/python2-cairo-devel<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/python2-pycairo-debugsource<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/gimp<2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
redhat/gimp-debuginfo<2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
redhat/gimp-debugsource<2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
redhat/gimp-devel<2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
redhat/gimp-devel-tools<2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
redhat/gimp-devel-tools-debuginfo<2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
redhat/gimp-libs<2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
redhat/gimp-libs-debuginfo<2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
2.8.22-25.module+el8.8.0+21240+7db4aa5a.aa
redhat/pygobject2<2.28.7-4.module+el8+2760+3d7d61b2.aa
2.28.7-4.module+el8+2760+3d7d61b2.aa
redhat/pygobject2-codegen<2.28.7-4.module+el8+2760+3d7d61b2.aa
2.28.7-4.module+el8+2760+3d7d61b2.aa
redhat/pygobject2-debuginfo<2.28.7-4.module+el8+2760+3d7d61b2.aa
2.28.7-4.module+el8+2760+3d7d61b2.aa
redhat/pygobject2-debugsource<2.28.7-4.module+el8+2760+3d7d61b2.aa
2.28.7-4.module+el8+2760+3d7d61b2.aa
redhat/pygobject2-devel<2.28.7-4.module+el8+2760+3d7d61b2.aa
2.28.7-4.module+el8+2760+3d7d61b2.aa
redhat/pygobject2-doc<2.28.7-4.module+el8+2760+3d7d61b2.aa
2.28.7-4.module+el8+2760+3d7d61b2.aa
redhat/pygtk2<2.24.0-25.module+el8.4.0+9382+ff08b506.aa
2.24.0-25.module+el8.4.0+9382+ff08b506.aa
redhat/pygtk2-codegen<2.24.0-25.module+el8.4.0+9382+ff08b506.aa
2.24.0-25.module+el8.4.0+9382+ff08b506.aa
redhat/pygtk2-debuginfo<2.24.0-25.module+el8.4.0+9382+ff08b506.aa
2.24.0-25.module+el8.4.0+9382+ff08b506.aa
redhat/pygtk2-debugsource<2.24.0-25.module+el8.4.0+9382+ff08b506.aa
2.24.0-25.module+el8.4.0+9382+ff08b506.aa
redhat/pygtk2-devel<2.24.0-25.module+el8.4.0+9382+ff08b506.aa
2.24.0-25.module+el8.4.0+9382+ff08b506.aa
redhat/python2-cairo<1.16.3-6.module+el8+2760+3d7d61b2.aa
1.16.3-6.module+el8+2760+3d7d61b2.aa
redhat/python2-cairo-debuginfo<1.16.3-6.module+el8+2760+3d7d61b2.aa
1.16.3-6.module+el8+2760+3d7d61b2.aa
redhat/python2-cairo-devel<1.16.3-6.module+el8+2760+3d7d61b2.aa
1.16.3-6.module+el8+2760+3d7d61b2.aa
redhat/python2-pycairo-debugsource<1.16.3-6.module+el8+2760+3d7d61b2.aa
1.16.3-6.module+el8+2760+3d7d61b2.aa
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Remediation
Event History
Feb 19, 2024
Advisory Published
via Red Hat·02:02 PM
Jun 22, 2024
Advisory Published
via Red Hat·03:22 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:0862?
The severity of RHSA-2024:0862 is classified as important.
2
How do I fix RHSA-2024:0862?
To fix RHSA-2024:0862, you should update the affected packages to the specified versions listed in the advisory.
3
Which packages are affected by RHSA-2024:0862?
RHSA-2024:0862 affects the gimp package and its associated libraries and development tools.
4
What is the reason for the RHSA-2024:0862 update?
The RHSA-2024:0862 update addresses security vulnerabilities found in the gimp software package.
5
Is there a specific version I need to update to for RHSA-2024:0862?
You need to update the gimp package to version 2.8.22-25.module+el8.8.0+21240+7db4aa5a.