Opened 8 months ago

Closed 8 months ago

#22834 closed enhancement (fixed)

Backport several security fixes to GIMP

Reported by: Douglas R. Reno Owned by: blfs-book
Priority: elevated Milestone: 13.0
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

While reviewing the GNOME Security Wiki (​https://gitlab.gnome.org/Teams/Releng/security/-/wikis/2026), I noticed five fixes for GIMP that we are going to want to backport. This includes:

  • (CVE-2026-2239) PSD loader: heap-buffer-overflow in fread_pascal_string() (no null terminator)
  • (CVE-2026-2271) GIMP PSP File Parsing Integer Overflow Leading to Heap Corruption
  • (CVE-2026-2272) ICO import integer overflow bypass leads to heap buffer overflow

and then two security fixes which do not have CVEs

Attachments (1)

gimp-3.0.6-security_fixes-1.patch​ (98.8 KB ) - added by Joe Locash 8 months ago.
Patch for gimp to fix security issues.

Download all attachments as: .zip

Change History (5)

by Joe Locash, 8 months ago

Attachment: gimp-3.0.6-security_fixes-1.patch​ added

Patch for gimp to fix security issues.

comment:1 by Joe Locash, 8 months ago

Patch added for the fixes. Please test and if it's fine I'll commit it.

comment:2 by pierre, 8 months ago

Built GIMP and run the tests. The same three tests fail as mentioned in the book. I've also started the resulting program and drawn a few lines... I guess you are good to go.

comment:3 by Joe Locash, 8 months ago

Thanks Pierre.

Fixed at 49080df907.

Leaving open for security advisory.

comment:4 by Douglas R. Reno, 8 months ago

Resolution: → fixed
Status: new → closed

SA-12.4-105 issued

Note: See TracTickets for help on using tickets.