[From nobody Sun Sep 20 08:29:07 2026
Received: (at 1148480-done) by bugs.debian.org; 20 Sep 2026 07:25:25 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-112.2 required=4.0 tests=ALL_TRUSTED,BAYES_00,
 DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,
 FROMDEVELOPER,HAS_BUG_NUMBER,MD5_SHA1_SUM,SPF_HELO_NONE,SPF_PASS,
 USER_IN_DKIM_WELCOMELIST,VERSION autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 16; hammy, 128; neutral, 17; spammy,
 0. spammytokens:
 hammytokens:0.000-+--Hx-spam-relays-external:sk:stravin,
 0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311,
 0.000-+--H*RT:311, 0.000-+--H*RT:108
Return-path: <jbicha@debian.org>
Received: from stravinsky.debian.org ([2001:41b8:202:deb::311:108]:45354)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <jbicha@debian.org>) id 1x8BvR-008L8F-23
 for 1148480-done@bugs.debian.org; Sun, 20 Sep 2026 07:25:25 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; 
 s=smtpauto.stravinsky;
 h=X-Debian-User:Content-Transfer-Encoding:Content-Type
 :Cc:To:Subject:Message-ID:Date:From:In-Reply-To:References:MIME-Version:
 Reply-To:Content-ID:Content-Description;
 bh=ksUSgSGsYfB7xkXGvqB6j67LL4UBnRke8EpG75sIKqQ=; b=kpJtOFxj9YXgAd8578qvpUDWsi
 WgAtGWokIL6IEuXs/xlk9vKWf4TMUwS2gv0fxPj0v3YmR15Pweh68aC0IcMOXn3k1zwtXvDWoGNC2
 kWqFDKyiTzWwb5LuCziFJ3tcklHZTT6v+B1dg3twnGBjfi/hf5H1lXbZuAUI8fhqfD44J8u0JX4FP
 tIIE1FwnaXaZvFC4EnWDQ54SsLhjq60GAbdfOAWBSf7A3itmvKm8XoeyMN/FPYqSfkeIi+31NojfV
 Y+MgkXTv3rx2FVKO9h5CCoGSUe0Na1InBT4YXf55n2Ff9y8tLjncmSIDLNRQfAiHtsbBOzqrJjdJH
 4jMC8wQw==;
Received: from authenticated-user by stravinsky.debian.org with esmtpsa
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_128_GCM:128)
 (Exim 4.96) (envelope-from <jbicha@debian.org>) id 1x8BvP-001GBg-1h
 for 1148480-done@bugs.debian.org; Sun, 20 Sep 2026 07:25:24 +0000
Received: by mail-pz2-f41.google.com with SMTP id
 d2e1a72fcca58-85469a33c9cso2735832b3a.0
 for <1148480-done@bugs.debian.org>; Sun, 20 Sep 2026 00:25:23 -0700 (PDT)
X-Gm-Message-State: AFuF++mOkQ2Zg2+UgTsNr/qaDLcE+gDMw4465xSkdY59Q/49Pblqd3Yt
 M+40Ksu54Dn9TfqqZ8ts71xt8QYlKBcnczZS4rf+tkVBrH3cNFIkS58Du7lGTCMniqvbMAXl0F/
 7pvQzfX4PQRkeqVl9uKcNz9Q5Wwvn2OCwWZRPVu/aTJoLRMFQ9BYpWl3YBUkG2cJhSpV8y8ujqS
 wOurF7X7I9WsxITJYSwkCF7kCHsMOfZA==
X-Received: by 2002:a05:6a21:112:b0:3dd:a00a:1711 with SMTP id
 adf61e73a8af0-3dda00a302fmr7521168637.44.1789889121150; Sun, 20 Sep 2026
 00:25:21 -0700 (PDT)
MIME-Version: 1.0
References: <aq8LigYQahx4QzQ5@pisco.westfalen.local>
In-Reply-To: <aq8LigYQahx4QzQ5@pisco.westfalen.local>
From: =?UTF-8?Q?Jeremy_B=C3=ADcha?= <jbicha@debian.org>
Date: Sun, 20 Sep 2026 09:24:44 +0200
X-Gmail-Original-Message-ID: <CAAajCMay9O+VgKNYN-P2o67OdUqAyEKfs48d7ooRJatW0ju86w@mail.gmail.com>
X-Gm-Features: AcwNN1W0l4ExzvW5QwilEsMRtK-6tYTr7R9bRq8mporZ12L7xyR2l2FvQYyjfng
Message-ID: <CAAajCMay9O+VgKNYN-P2o67OdUqAyEKfs48d7ooRJatW0ju86w@mail.gmail.com>
Subject: Re: Bug#1148480: gimp: CVE-2026-90948
To: 1148480-done@bugs.debian.org
Cc: Debian Security Team <team@security.debian.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Debian-User: jbicha

Version: 3.2.6-1

On Sun, Sep 20, 2026 at 12:25=E2=80=AFAM Moritz M=C3=BChlenhoff <jmm@inutil=
.org> wrote:
> Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/123d6360b8d7e2a00a=
9d913889ee9cdca88e2380 (master)
> Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/07c8d365873dc748a1=
1a2df19e7a9eeab1c10667 (gimp-3-2 branch)

This is https://salsa.debian.org/gnome-team/extras/gimp/-/blob/debian/lates=
t/debian/patches/16742.patch

Thank you,
Jeremy B=C3=ADcha]