Ubuntu
gimp package

gimp 2.10.18-1ubuntu0.1 source package in Ubuntu

Changelog

gimp (2.10.18-1ubuntu0.1) focal-security; urgency=medium

  [ Luís Infante da Câmara ]
  * SECURITY UPDATE: Buffer overflow leading to insufficient memory or
    program crash via a crafted XCF file (LP: #1982422)
    - debian/patches/CVE-2022-30067.patch: Stop loading paths and skip to
      the next property when xcf_old_path fails.
    - CVE-2022-30067
  * SECURITY UPDATE: Denial of service via a crafted XCF file
    (LP: #1982422)
    - debian/patches/CVE-2022-32990-1.patch: Check maximum dimensions when
      loading XCF files.
    - debian/patches/CVE-2022-32990-2.patch: Check for invalid offsets when
      loading XCF files.
    - debian/patches/CVE-2022-32990-3.patch: Return TRUE in
      gimp_channel_is_empty when channel is NULL.
    - CVE-2022-32990

  [ Marc Deslauriers ]
  * SECURITY UPDATE: DDS File Parsing Heap-based Buffer Overflow
    - debian/patches/CVE-2023-44441-1.patch: verify header information in
      plug-ins/file-dds/ddsread.c.
    - debian/patches/CVE-2023-44441-2.patch: fix checks in
      plug-ins/file-dds/ddsread.c.
    - debian/patches/CVE-2023-44441-3.patch: add additional fixes in
      plug-ins/file-dds/ddsread.c.
    - CVE-2023-44441
  * SECURITY UPDATE: PSD File Parsing Heap-based Buffer Overflow
    - debian/patches/CVE-2023-44442.patch: add missing break statement in
      plug-ins/file-psd/psd-util.c.
    - CVE-2023-44442
  * SECURITY UPDATE: PSP File Parsing Off-By-One
    - debian/patches/CVE-2023-44444.patch: fix buffer size in
      plug-ins/common/file-psp.c.
    - CVE-2023-44444

 -- Marc Deslauriers <email address hidden>  Tue, 28 Nov 2023 07:38:10 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
graphics
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates universe graphics
Focal security universe graphics

Downloads

File Size SHA-256 Checksum
gimp_2.10.18.orig.tar.bz2 31.4 MiB 65bfe111e8eebffd3dde3016ccb507f9948d2663d9497cb438d9bb609e11d716
gimp_2.10.18-1ubuntu0.1.debian.tar.xz 46.9 KiB 75b1433db38ab5e483904d9a73c468bb84d9fa99714ea94cf81449018d3496c6
gimp_2.10.18-1ubuntu0.1.dsc 3.4 KiB f8c64e290176a0b26d1f50da29aa421dc5485769c0c27a9be97bc83cd3c035e1

View changes file

Binary packages built by this source

gimp: GNU Image Manipulation Program

 GIMP is an advanced picture editor. You can use it to edit, enhance, and
 retouch photos and scans, create drawings, and make your own images.
 It has a large collection of professional-level editing tools and
 filters, similar to the ones you might find in Photoshop. Numerous
 fine-control settings and features like layers, paths, masks, and
 scripting give you total control over your images.
 .
 Many image file formats are supported, including JPEG, Photoshop (.psd),
 and Paint Shop Pro (.psp) files. It can also be used to scan and print
 photos.
 .
 To open files remotely (like over HTTP), install the gvfs-backends
 package.
 .
 To use a MIDI device (like a musical keyboard) as an input controller in GIMP,
 install libasound2 and read the how-to at /usr/share/doc/gimp/README.MIDI

gimp-data: Data files for GIMP

 This package contains architecture-independent supporting data files
 for use with GIMP.

gimp-dbgsym: debug symbols for gimp
libgimp2.0: Libraries for the GNU Image Manipulation Program

 This package includes the libgimp libraries, which are
 necessary to run GIMP and third-party GIMP plugins.

libgimp2.0-dbgsym: debug symbols for libgimp2.0
libgimp2.0-dev: Headers and other files for compiling plugins for GIMP

 This package contains the header files for the GNU Image Manipulation
 Program, along with the static versions of libgimp.
 It also includes the gimptool-2.0 utility.
 .
 Install this package if you wish to compile your own plugins,
 or if you wish to develop packages that use libgimp.

libgimp2.0-dev-dbgsym: debug symbols for libgimp2.0-dev
libgimp2.0-doc: Developers' Documentation for the GIMP library

 This package contains the HTML documentation for the GIMP library in
 /usr/share/gtk-doc/html/ .