In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c. Upstream bug: https://bugzilla.gnome.org/show_bug.cgi?id=739133 Upstream patch: https://git.gnome.org/browse/GIMP/commit/?id=edb251a7ef1602d20a5afcbf23f24afb163de63b https://git.gnome.org/browse/GIMP/commit/?id=1882bac996a20ab5c15c42b0c5e8f49033a1af54
Created gimp tracking bugs for this issue: Affects: fedora-all [bug 1529149]