RHSA-2024:1007: Important: gimp:2.8 security update
Published Feb 27, 2024
·Updated
Important: gimp:2.8 security update
Other sources
The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.Security Fix(es): gimp: PSD buffer overflow RCE (CVE-2023-44442) gimp: psp off-by-one RCE (CVE-2023-44444) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
55 affected componentsFixes available
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
redhat/gimp<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/pygobject2<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygtk2<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/python2-pycairo<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/pygtk2-doc<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/gimp<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/gimp-debuginfo<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/gimp-debugsource<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/gimp-devel<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/gimp-devel-tools<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/gimp-devel-tools-debuginfo<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/gimp-libs<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/gimp-libs-debuginfo<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/pygobject2<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-codegen<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-debuginfo<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-debugsource<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-devel<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-doc<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygtk2<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-codegen<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-debuginfo<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-debugsource<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-devel<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/python2-cairo<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/python2-cairo-debuginfo<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/python2-cairo-devel<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/python2-pycairo-debugsource<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/gimp<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/gimp-debuginfo<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/gimp-debugsource<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/gimp-devel<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/gimp-devel-tools<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/gimp-devel-tools-debuginfo<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/gimp-libs<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/gimp-libs-debuginfo<2.8.22-16.module+el8.4.0+21284+53f03f2b
2.8.22-16.module+el8.4.0+21284+53f03f2b
redhat/pygobject2<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-codegen<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-debuginfo<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-debugsource<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-devel<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygobject2-doc<2.28.7-4.module+el8+2760+3d7d61b2
2.28.7-4.module+el8+2760+3d7d61b2
redhat/pygtk2<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-codegen<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-debuginfo<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-debugsource<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/pygtk2-devel<2.24.0-25.module+el8.4.0+9382+ff08b506
2.24.0-25.module+el8.4.0+9382+ff08b506
redhat/python2-cairo<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/python2-cairo-debuginfo<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/python2-cairo-devel<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
redhat/python2-pycairo-debugsource<1.16.3-6.module+el8+2760+3d7d61b2
1.16.3-6.module+el8+2760+3d7d61b2
Remediation
Event History
Feb 27, 2024
Advisory Published
via Red Hat·02:08 PM
Mar 6, 2025
Advisory Published
via Red Hat·12:14 AM
Frequently Asked Questions
1
What is the severity of RHSA-2024:1007?
The severity of RHSA-2024:1007 is classified as Important.
2
How do I fix RHSA-2024:1007?
To fix RHSA-2024:1007, update the affected packages to the latest versions noted in the advisory.
3
Which software is affected by RHSA-2024:1007?
The software affected by RHSA-2024:1007 includes GIMP and its associated packages like pygobject2 and pygtk2.
4
Is RHSA-2024:1007 related to GIMP?
Yes, RHSA-2024:1007 specifically addresses a security issue in the GIMP image manipulation program.
5
What versions of GIMP are vulnerable in RHSA-2024:1007?
GIMP version 2.8.22-16.module+el8.4.0+21284+53f03f2b is vulnerable as stated in RHSA-2024:1007.