Advisories » MGASA-2018-0030

Updated gimp packages fix security vulnerability

Publication date: 03 Jan 2018
Modification date: 03 Jan 2018
Type: security
Affected Mageia releases : 5
CVE: CVE-2017-17784 , CVE-2017-17785 , CVE-2017-17786 , CVE-2017-17787 , CVE-2017-17788 , CVE-2017-17789

Description

Several vulnerabilities were discovered in the GIMP which could result in
denial of service (application crash) or potentially the execution of
arbitrary code if malformed files are opened (CVE-2017-17784,
CVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17788,
CVE-2017-17789).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=22291
• https://www.debian.org/security/2017/dsa-4077
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17784
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17785
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17786
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17787
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17788
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17789

SRPMS

5/core

• gimp-2.8.14-4.3.mga5