Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3ea57a93 by Moritz Muehlenhoff at 2026-09-12T17:12:36+02:00
gimp fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -42366,7 +42366,7 @@ CVE-2026-59233 (Missing Authorization in the permission
management component in
CVE-2026-59112 (Improper verification of cryptographic signature and Improper
Check fo ...)
NOT-FOR-US: Estonian Information System Authority (RIA)
CVE-2026-59091 (A flaw was found in GIMP's file format plugins, including
those for PS ...)
- - gimp <unfixed> (bug #1144520)
+ - gimp 3.2.6-1 (bug #1144520)
[trixie] - gimp <not-affected> (Vulnerable code not present)
[bookworm] - gimp <not-affected> (Vulnerable code not present)
[bullseye] - gimp <not-affected> (Vulnerable code not present)
@@ -42375,16 +42375,16 @@ CVE-2026-59091 (A flaw was found in GIMP's file
format plugins, including those
NOTE: Introduced by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/901d1cd9d9680927e76001ad13411fe0df922300
(GIMP_3_1_4)
CVE-2026-59090 (A flaw was found in GIMP's PSD file format plugin. This
vulnerability, ...)
{DSA-6470-1}
- - gimp <unfixed> (bug #1144526)
+ - gimp 3.2.6-1 (bug #1144526)
NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16509
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/612c7e0a5775e7883789022c61f85a1c82c05505
CVE-2026-59088 (A flaw was found in GIMP. A signed integer overflow
vulnerability exis ...)
{DSA-6470-1}
- - gimp <unfixed> (bug #1144528)
+ - gimp 3.2.6-1 (bug #1144528)
NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16492
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/1db4690bde3a349df046f85a4ee9a71af8492216
CVE-2026-59087 (A flaw was found in the GIMP image manipulation program,
specifically ...)
- - gimp <unfixed> (bug #1144529)
+ - gimp 3.2.6-1 (bug #1144529)
[trixie] - gimp <not-affected> (Vulnerable code not present)
[bookworm] - gimp <not-affected> (Vulnerable code not present)
[bullseye] - gimp <not-affected> (Vulnerable code not present)
@@ -54706,16 +54706,16 @@ CVE-2026-64537 (In the Linux kernel, the following
vulnerability has been resolv
NOTE:
https://git.kernel.org/linus/f3e02edd8322b31b8e6517faa6ba053bf29d1e26 (7.2-rc1)
CVE-2026-66759 (A flaw was found in the file-icns plugin in GIMP. When
applying a deco ...)
{DSA-6470-1}
- - gimp <unfixed> (bug #1142992)
+ - gimp 3.2.6-1 (bug #1142992)
NOTE: https://gitlab.gnome.org/GNOME/gimp/-/issues/16528
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/abb3129a8ecb79bf3af6df03bc35ddf8f7aaba20
CVE-2026-66758 (A flaw was found in the file-fits plugin in GIMP. When
processing a FI ...)
{DSA-6470-1}
- - gimp <unfixed> (bug #1142991)
+ - gimp 3.2.6-1 (bug #1142991)
NOTE: https://gitlab.gnome.org/GNOME/gimp/-/issues/16528
- NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/89ae907fea5ccc8bd1f626dbe01fdcfe29940ac9
+ NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/89ae907fea5ccc8bd1f626dbe01fdcfe29940ac9
(GIMP_3_2_6)
CVE-2026-66757 (A flaw was found in the file-sgi plugin in GIMP. When
processing an RL ...)
- - gimp <unfixed> (bug #1142990)
+ - gimp 3.2.6-1 (bug #1142990)
[trixie] - gimp <no-dsa> (Minor issue)
NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16494
NOTE: https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2884
@@ -74720,7 +74720,7 @@ CVE-2026-45094
[bullseye] - fastdds <postponed> (Minor issue; DoS via crafted input,
vulnerable code present)
NOTE: Fixed by:
https://github.com/eProsima/Fast-DDS/commit/d9f4b373c90179c96f3b1542e72f16e282ef0104
(v3.6.2)
CVE-2026-59089 (A flaw was found in GIMP. The PlayStation TIM loader,
responsible for ...)
- - gimp <unfixed> (bug #1143023)
+ - gimp 3.2.6-1 (bug #1143023)
[trixie] - gimp <not-affected> (Vulnerable code introduced later)
[bookworm] - gimp <not-affected> (PlayStation TIM loader
plug-ins/common/file-tim.c added in GIMP 3.x; 2.10 has no such loader)
[bullseye] - gimp <not-affected> (PlayStation TIM loader
plug-ins/common/file-tim.c added in GIMP 3.x; 2.10 has no such loader)
@@ -75793,7 +75793,7 @@ CVE-2026-59234 (Authorization Bypass Through
User-Controlled Key (CWE-639) in Ca
NOT-FOR-US: Prospero Flow CRM
CVE-2026-58379 (A flaw was found in GIMP's Paint Shop Pro (PSP) file format
parser. Th ...)
{DSA-6470-1}
- - gimp <unfixed> (bug #1141415)
+ - gimp 3.2.6-1 (bug #1141415)
NOTE: https://gitlab.gnome.org/GNOME/gimp/-/issues/16205
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/b630f167ba7b73b17e7dd6df1fee1623f8324575
CVE-2026-56085 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7,
LTS2026 r ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3ea57a93d642a90dc10aeba4d664de9db33ec97b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3ea57a93d642a90dc10aeba4d664de9db33ec97b
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
