Package name
gimp
Date
2009-12-11
Advisory ID
MDVSA-2009:332
Affected versions
2009.1 i586 , 2009.1 x86_64 , 2010.0 x86_64 , 2010.0 i586

Problem description

A vulnerability was discovered and corrected in gimp:

Integer overflow in the read_channel_data function in
plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers
to execute arbitrary code via a crafted PSD file that triggers a
heap-based buffer overflow (CVE-2009-3909).

Additionally the patch for CVE-2009-1570 in MDVSA-2009:296 was
incomplete, this update corrects this as well.

This update provides a solution to this vulnerability.

Updated packages

2009.1 i586

 fa558f5ff6967b9b2e1339be5edb4dae  2009.1/i586/gimp-2.6.6-3.2mdv2009.1.i586.rpm
 1810d6d75ccaa4be789331652e2e646b  2009.1/i586/gimp-python-2.6.6-3.2mdv2009.1.i586.rpm
 5f3aa201fd430a9d2292c60106a7cd4f  2009.1/i586/libgimp2.0_0-2.6.6-3.2mdv2009.1.i586.rpm
 f7fbcaf7ec8c86f2ca2a385d29e0f832  2009.1/i586/libgimp2.0-devel-2.6.6-3.2mdv2009.1.i586.rpm 
 5a4bb71d1ea5aa452225c2e9f1e37346  2009.1/SRPMS/gimp-2.6.6-3.2mdv2009.1.src.rpm

2009.1 x86_64

 e6d85646179c119353ce6b84e37f5906  2009.1/x86_64/gimp-2.6.6-3.2mdv2009.1.x86_64.rpm
 2dea8cbca0edd767c7e28ed5b8f4821f  2009.1/x86_64/gimp-python-2.6.6-3.2mdv2009.1.x86_64.rpm
 b92fe0290e5e9d23f7fe55e821d56dd4  2009.1/x86_64/lib64gimp2.0_0-2.6.6-3.2mdv2009.1.x86_64.rpm
 85c9c31b5f8ef1b9462c7e7ad7ab89d0  2009.1/x86_64/lib64gimp2.0-devel-2.6.6-3.2mdv2009.1.x86_64.rpm 
 5a4bb71d1ea5aa452225c2e9f1e37346  2009.1/SRPMS/gimp-2.6.6-3.2mdv2009.1.src.rpm

2010.0 x86_64

 847d2a698c76b51de51d58c0e81bb738  2010.0/x86_64/gimp-2.6.7-4.2mdv2010.0.x86_64.rpm
 762c98f5123f022a2def25e04500eed9  2010.0/x86_64/gimp-python-2.6.7-4.2mdv2010.0.x86_64.rpm
 4624eddf6ceefcc86cffc9dc1e0284b6  2010.0/x86_64/lib64gimp2.0_0-2.6.7-4.2mdv2010.0.x86_64.rpm
 a958ee9fe15c253c12f6f875ef23363c  2010.0/x86_64/lib64gimp2.0-devel-2.6.7-4.2mdv2010.0.x86_64.rpm 
 9f70e273efe492b8261d369f6812dccd  2010.0/SRPMS/gimp-2.6.7-4.2mdv2010.0.src.rpm

2010.0 i586

 0937992f9dac9759e581a8fe3da308f9  2010.0/i586/gimp-2.6.7-4.2mdv2010.0.i586.rpm
 e00452005dd8c438416a4cb4dfdf4237  2010.0/i586/gimp-python-2.6.7-4.2mdv2010.0.i586.rpm
 e88978c421174f022081683e22fd8c22  2010.0/i586/libgimp2.0_0-2.6.7-4.2mdv2010.0.i586.rpm
 ca93895eda99b5285e570a82b8044c4e  2010.0/i586/libgimp2.0-devel-2.6.7-4.2mdv2010.0.i586.rpm 
 9f70e273efe492b8261d369f6812dccd  2010.0/SRPMS/gimp-2.6.7-4.2mdv2010.0.src.rpm

References