[CLSA-2026:1790962046] gegl04: Fix of CVE-2025-10921
Type:
security
Severity:
Important
Release date:
2026-10-02 17:27:37 UTC
Description:
- CVE-2025-10921: fix HDR file parsing heap-based buffer overflow vulnerability; bound linesize by the size of one scanline and correct the run length check added for CVE-2026-2050
CVEs fixed:
Updated packages:
  • gegl04-0.4.62-1.el9_8.2.tuxcare.els1.aarch64.rpm
    sha:1b998da1095da9cf5a2a97d11b7adb83e4549be27ceaf1f6184bc2252527a614
  • gegl04-0.4.62-1.el9_8.2.tuxcare.els1.i686.rpm
    sha:458f9f3168ce052bc967180074c1db5207634112a22c9b233a809b9e9e5ade02
  • gegl04-0.4.62-1.el9_8.2.tuxcare.els1.x86_64.rpm
    sha:3cc51cab31bff128f50943d7a5f7d5384d1f029648cf84005526c08792490264
  • gegl04-devel-0.4.62-1.el9_8.2.tuxcare.els1.aarch64.rpm
    sha:79b6c6ff0854e10243bc477719f4b9e9ce1d707e6aefe222fc8403ba6a340e54
  • gegl04-devel-0.4.62-1.el9_8.2.tuxcare.els1.i686.rpm
    sha:ef2b7398987d7c0fbd072d8a22956b08ea57d86e4a6f41ff4e49e150d750e4bc
  • gegl04-devel-0.4.62-1.el9_8.2.tuxcare.els1.x86_64.rpm
    sha:b560e3e4e8b517baec60adb679800a69939eb72d7ed584662b09978f319457f7
  • gegl04-devel-docs-0.4.62-1.el9_8.2.tuxcare.els1.aarch64.rpm
    sha:8adaecdbc02ef38f42bcf9781ead9d44fa2c431c3c127069d1a8571b9ffee347
  • gegl04-devel-docs-0.4.62-1.el9_8.2.tuxcare.els1.i686.rpm
    sha:816ad2a6521029591265544657804eaf24e7a9b5f962e93230b2e66d0a5aa43b
  • gegl04-devel-docs-0.4.62-1.el9_8.2.tuxcare.els1.x86_64.rpm
    sha:408700b930d1190f3c38ad7c77254c5f77fda3a55730681d647c2577b89e4ad6
  • gegl04-tools-0.4.62-1.el9_8.2.tuxcare.els1.aarch64.rpm
    sha:aa3a84b06bf7b1263628fe4b663131cb6283f368542adeb11f5c06bb14e45c53
  • gegl04-tools-0.4.62-1.el9_8.2.tuxcare.els1.i686.rpm
    sha:8866f024143b155675ec6afc2f5b72769d13fe73c0f625b9e9ce6e255b155de1
  • gegl04-tools-0.4.62-1.el9_8.2.tuxcare.els1.x86_64.rpm
    sha:d896b69d8fa8ebbc821e1ffa3a1cfd0ebb193af02669a732778e7b6684f2b6c7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.