Release pygtk2-doc-2.24.0-25.module+el8.9.0+21228+8e80d31d ALSA-2026:95482

Ouverte
  • Quelque chose ne va pas ?
#4,115 11 commentaires 0 réactions 0 personnes assignées Voir sur GitHub

Personne n'a encore pris cette issue.

Évaluation

Difficulté
5/5
Temps estimé
Plus d'une semaine
Accessibilité débutants
10/100
Type d'issue
Bug
Clarté
À clarifier
Activité
Active
Stack technique
python
Domaine
security

Piste de recherche

The report names GIMP 2.8 and the PSD thumbnail loader function load_resource_1033, but does not identify source files or tests. Start by locating that loader and reviewing the referenced CVE details; the report also mentions an XPM behavior fix. Done means addressing the reported security and bug fixes and confirming the affected packages are updated, though this issue does not specify implementation or validation steps.

Rédigé par le modèle d'indexation à partir du texte de l'issue.

Description

gimp:2.8 security, bug fix, and enhancement update
Severity: Important
Description
The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

  • gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader (load_resource_1033) (CVE-2026-112257)

Bug Fix(es) and Enhancement(s):

  • gimp: xpm poc file for CVE-2026-4154 should error differently (JIRA:RHEL-178367)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected packages:
pygtk2-doc-2.24.0-25.module+el8.9.0+21228+8e80d31d.noarch
gimp-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.x86_64
gimp-devel-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.x86_64
gimp-devel-tools-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.x86_64
gimp-libs-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.x86_64
pygobject2-2.28.7-5.module+el8.10.0+22676+becd68d6.x86_64
pygobject2-codegen-2.28.7-5.module+el8.10.0+22676+becd68d6.x86_64
pygobject2-devel-2.28.7-5.module+el8.10.0+22676+becd68d6.x86_64
pygobject2-doc-2.28.7-5.module+el8.10.0+22676+becd68d6.x86_64
pygtk2-2.24.0-25.module+el8.9.0+21228+8e80d31d.x86_64
pygtk2-codegen-2.24.0-25.module+el8.9.0+21228+8e80d31d.x86_64
pygtk2-devel-2.24.0-25.module+el8.9.0+21228+8e80d31d.x86_64
pygtk2-doc-2.24.0-25.module+el8.9.0+21228+8e80d31d.noarch
python2-cairo-1.16.3-7.module+el8.10.0+22676+becd68d6.x86_64
python2-cairo-devel-1.16.3-7.module+el8.10.0+22676+becd68d6.x86_64
pygtk2-doc-2.24.0-25.module+el8.9.0+21228+8e80d31d.noarch
pygtk2-doc-2.24.0-25.module+el8.9.0+21228+8e80d31d.noarch
pygtk2-doc-2.24.0-25.module+el8.9.0+21228+8e80d31d.noarch
pygtk2-doc-2.24.0-25.module+el8.9.0+21228+8e80d31d.noarch
gimp-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.s390x
gimp-devel-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.s390x
gimp-devel-tools-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.s390x
gimp-libs-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.s390x
pygobject2-2.28.7-5.module+el8.10.0+22676+becd68d6.s390x
pygobject2-codegen-2.28.7-5.module+el8.10.0+22676+becd68d6.s390x
pygobject2-devel-2.28.7-5.module+el8.10.0+22676+becd68d6.s390x
pygobject2-doc-2.28.7-5.module+el8.10.0+22676+becd68d6.s390x
pygtk2-2.24.0-25.module+el8.9.0+21228+8e80d31d.s390x
pygtk2-codegen-2.24.0-25.module+el8.9.0+21228+8e80d31d.s390x
pygtk2-devel-2.24.0-25.module+el8.9.0+21228+8e80d31d.s390x
python2-cairo-1.16.3-7.module+el8.10.0+22676+becd68d6.s390x
python2-cairo-devel-1.16.3-7.module+el8.10.0+22676+becd68d6.s390x
pygtk2-doc-2.24.0-25.module+el8.9.0+21228+8e80d31d.noarch
pygtk2-doc-2.24.0-25.module+el8.9.0+21228+8e80d31d.noarch
gimp-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.ppc64le
gimp-devel-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.ppc64le
gimp-devel-tools-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.ppc64le
gimp-libs-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.ppc64le
pygobject2-2.28.7-5.module+el8.10.0+22676+becd68d6.ppc64le
pygobject2-codegen-2.28.7-5.module+el8.10.0+22676+becd68d6.ppc64le
pygobject2-devel-2.28.7-5.module+el8.10.0+22676+becd68d6.ppc64le
pygobject2-doc-2.28.7-5.module+el8.10.0+22676+becd68d6.ppc64le
pygtk2-2.24.0-25.module+el8.9.0+21228+8e80d31d.ppc64le
pygtk2-codegen-2.24.0-25.module+el8.9.0+21228+8e80d31d.ppc64le
pygtk2-devel-2.24.0-25.module+el8.9.0+21228+8e80d31d.ppc64le
pygtk2-doc-2.24.0-25.module+el8.9.0+21228+8e80d31d.noarch
python2-cairo-1.16.3-7.module+el8.10.0+22676+becd68d6.ppc64le
python2-cairo-devel-1.16.3-7.module+el8.10.0+22676+becd68d6.ppc64le
gimp-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.aarch64
gimp-devel-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.aarch64
gimp-devel-tools-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.aarch64
gimp-libs-2.8.22-26.module+el8.10.0+25170+1f1aa845.10.aarch64
pygobject2-2.28.7-5.module+el8.10.0+22676+becd68d6.aarch64
pygobject2-codegen-2.28.7-5.module+el8.10.0+22676+becd68d6.aarch64
pygobject2-devel-2.28.7-5.module+el8.10.0+22676+becd68d6.aarch64
pygobject2-doc-2.28.7-5.module+el8.10.0+22676+becd68d6.aarch64
pygtk2-2.24.0-25.module+el8.9.0+21228+8e80d31d.aarch64
pygtk2-codegen-2.24.0-25.module+el8.9.0+21228+8e80d31d.aarch64
pygtk2-devel-2.24.0-25.module+el8.9.0+21228+8e80d31d.aarch64
pygtk2-doc-2.24.0-25.module+el8.9.0+21228+8e80d31d.noarch
python2-cairo-1.16.3-7.module+el8.10.0+22676+becd68d6.aarch64
python2-cairo-devel-1.16.3-7.module+el8.10.0+22676+becd68d6.aarch64
pygtk2-doc-2.24.0-25.module+el8.9.0+21228+8e80d31d.noarch
pygtk2-doc-2.24.0-25.module+el8.9.0+21228+8e80d31d.noarch

Langage dominant
Aucune donnée de langage
Étoiles
2
Forks
0
Aucune PR mergée en 30 j

Préparer son environnement

Par où commencer

  1. Lisez l'issue en entier, puis le guide de contribution du projet.
  2. Signalez en commentaire que vous la prenez — cela évite que deux personnes fassent le même travail.
  3. Forkez le dépôt et travaillez sur une branche.
  4. Ouvrez une pull request qui référence le numéro de l'issue.

Autres issues de AlmaLinux/updates

Toutes les issues de AlmaLinux/updates

Issues similaires

Plus d'issues Security

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.