guix_mirror_bot pushed a commit to branch master
in repository guix.
commit bdd148b7139c09539f26112be441baa572066ec8
Author: Hugo Buddelmeijer <[email protected]>
AuthorDate: Wed Aug 26 18:43:39 2026 +0200
gnu: gimp: Hide CVE-2025-8672.
The vulnerability is for older GIMP versions on MacOS.
* gnu/packages/gimp.scm (gimp)[properties]: Add lint-hidden-cve.
Merges: https://codeberg.org/guix/guix/pulls/10833
Signed-off-by: Nguyễn Gia Phong <[email protected]>
---
gnu/packages/gimp.scm | 2 ++
1 file changed, 2 insertions(+)
diff --git a/gnu/packages/gimp.scm b/gnu/packages/gimp.scm
index 1d75ac61bb..3c70893e52 100644
--- a/gnu/packages/gimp.scm
+++ b/gnu/packages/gimp.scm
@@ -373,6 +373,8 @@ buffers.")
pkg-config))
(home-page "https://www.gimp.org";)
(synopsis "GNU Image Manipulation Program")
+ ;; CVE-2025-8672 concerns the Python bundled with GIMP < 3.1.4.2 on MacOS.
+ (properties '((lint-hidden-cve . (list "CVE-2025-8672"))))
(description
"GIMP is an application for image manipulation tasks such as photo
retouching, composition and authoring. It supports all common image formats
