Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
331f1e86 by Salvatore Bonaccorso at 2025-07-03T05:50:48+02:00
Track fixed version for CVE-2025-2760/gimp with complete fix
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -25377,7 +25377,7 @@ CVE-2025-2761 (GIMP FLI File Parsing Out-Of-Bounds
Write Remote Code Execution V
NOTE: https://gitlab.gnome.org/GNOME/gimp/-/issues/13073
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/0806bc76ca74543d20e1307ccf6aebd26395c56c
(GIMP_3_0_0)
CVE-2025-2760 (GIMP XWD File Parsing Integer Overflow Remote Code Execution
Vulnerabi ...)
- - gimp <unfixed> (bug #1107758)
+ - gimp 3.0.4-3 (bug #1107758)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-203/
NOTE: https://gitlab.gnome.org/GNOME/gimp/-/issues/12790
NOTE: Original fix incomplete (for 32bit systems):
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/331f1e868cd135b3f4fd2ac7b519ba3438a570ae
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/331f1e868cd135b3f4fd2ac7b519ba3438a570ae
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
