Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2467c7b4 by Salvatore Bonaccorso at 2025-05-27T21:07:19+02:00
Update status for CVE-2025-4879{6,7}/gimp
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -164,11 +164,20 @@ CVE-2025-48796 [Stack-based buffer overflows in file-ico]
NOTE: https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/879
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/0dc98936a0d9f5a70025f4e9cf321d1118ea500e
(GIMP_2_99_16)
CVE-2025-48797 [Multiple heap buffer overflows in TGA parser]
- - gimp <unfixed>
+ - gimp 3.0.0~RC1-4
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2368558
+ NOTE: https://gitlab.gnome.org/GNOME/gimp/-/issues/11822
+ NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/49755f085a6fcc9c692b14e67856e91a79245688
(GIMP_3_0_0_RC1)
+ NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/723d383e57e8f599c4a44ab8541ea6902e29579e
(GIMP_3_0_0_RC1)
+ NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/2ba35e5b3d43d881b0623f47b8068d9ee19d1d70
(GIMP_3_0_0_RC1)
+ NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/1f062867172d5c68b858a6efa3011686aa32bb38
(GIMP_3_0_0_RC1)
CVE-2025-48798 [Multiple use after free in XCF parser]
- - gimp <unfixed>
+ - gimp 3.0.0~RC1-4
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2368557
+ NOTE: https://gitlab.gnome.org/GNOME/gimp/-/issues/11822
+ NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/7d949423ed2231dd463968d86b58e0a3e01e6266
(GIMP_3_0_0_RC1)
+ NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/fe26086e16943860f3852120f546ce913a7a73ee
(GIMP_3_0_0_RC1)
+ NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/e7523ed41271e48a909011b8598d496c1be642e2
(GIMP_3_0_0_RC2)
CVE-2025-5198
NOT-FOR-US: Stackrox
CVE-2025-5203 (A vulnerability was found in Open Asset Import Library Assimp
5.4.3. I ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2467c7b48133409f35cca057fb53d12527aec2be
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2467c7b48133409f35cca057fb53d12527aec2be
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
