Security update for Gimp

SUSE Security Update: Security update for Gimp

---

Announcement ID:	SUSE-SU-2012:0963-1
Rating:	moderate
References:	#763595 #769565
Affected Products:	SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP1

---

An update that fixes two vulnerabilities is now available.

Description:

This update of Gimp fixed a remotely exploitable buffer
overflow in Script-Fu's server component as well as a NULL
pointer dereference flaw in the fit format handler.

Security Issue references:

* CVE-2012-2763
>
* CVE-2012-3236
>

Patch Instructions:

To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Software Development Kit 11 SP2:
  zypper in -t patch sdksp1-gimp-6542
• SUSE Linux Enterprise Software Development Kit 11 SP1:
  zypper in -t patch sdksp1-gimp-6542
• SUSE Linux Enterprise Desktop 11 SP2:
  zypper in -t patch sledsp1-gimp-6542
• SUSE Linux Enterprise Desktop 11 SP1:
  zypper in -t patch sledsp1-gimp-6542

To bring your system up-to-date, use "zypper patch".

Package List:

• SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64):

• gimp-2.6.2-3.34.35.1
• gimp-devel-2.6.2-3.34.35.1
• gimp-lang-2.6.2-3.34.35.1
• gimp-plugins-python-2.6.2-3.34.35.1
• SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64):

• gimp-2.6.2-3.34.35.1
• gimp-devel-2.6.2-3.34.35.1
• gimp-lang-2.6.2-3.34.35.1
• gimp-plugins-python-2.6.2-3.34.35.1
• SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64):

• gimp-2.6.2-3.34.35.1
• gimp-lang-2.6.2-3.34.35.1
• gimp-plugins-python-2.6.2-3.34.35.1
• SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64):

• gimp-2.6.2-3.34.35.1
• gimp-lang-2.6.2-3.34.35.1
• gimp-plugins-python-2.6.2-3.34.35.1

References:

http://support.novell.com/security/cve/CVE-2012-2763.html

http://support.novell.com/security/cve/CVE-2012-3236.html

https://bugzilla.novell.com/763595

https://bugzilla.novell.com/769565

http://download.suse.com/patch/finder/?keywords=275c435b2a85cf3f4e1f1722c12d990c