[From nobody Mon Sep 21 19:07:06 2026
Received: (at 1146133-close) by bugs.debian.org; 21 Sep 2026 18:04:42 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00,
 DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,
 HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST
 autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 6; hammy, 150; neutral, 219; spammy,
 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK,
 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz,
 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo
Return-path: &lt;envelope@ftp-master.debian.org&gt;
Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:41308)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1x8iNe-00ErD5-01 for 1146133-close@bugs.debian.org;
 Mon, 21 Sep 2026 18:04:42 +0000
Received: via submission
 from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA,
 CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified)
 by muffat.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1x8iNd-003HRS-2u for 1146133-close@bugs.debian.org;
 Mon, 21 Sep 2026 18:04:41 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type:
 Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID
 :Content-Description:In-Reply-To:References;
 bh=GSHr/E3d8JPlC4BqKsqR54HCPExoPA5FQK7gzR5S4S4=; b=GlRAZh2cthb8PtC453CIRjefdt
 2uOseuDq5bIAEbbr1TdCrePVosjiEwKne0hfpzuzXGcQ9sEQHmLmANdNc92WUZody3rlH0zU9qMuO
 L17YrUESO+RcLqYtc1MCwtzJxx47ShKIhBy2PdxwoyVtKpisjIM3tfxdztu45Gv0Ub5AO6SxLH1FU
 7pFLd4AF59A4Z1uBFyX2QrQm3MxG0xaHNV50T8QjzuHSClm4DKT6Q2XV+4ePnmLSmkRBRaI24iUvi
 2TcTtMnDTerffW3XSq6bdb2Uy+SSGC37P1gWiLntpuIKSKBXyRAPhiz3ADBoHKSH1u7HGbWKphFog
 pPJVgWag==;
Received: from dak by fasolo.debian.org with local (Exim 4.98.2)
 (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1x8iNd-00000008nwg-0RlJ; Mon, 21 Sep 2026 18:04:41 +0000
From: Debian FTP Masters &lt;ftpmaster@ftp-master.debian.org&gt;
Reply-To: =?utf-8?q?Moritz_M=C3=BChlenhoff?= &lt;jmm@debian.org&gt;
To: 1146133-close@bugs.debian.org
X-DAK: dak process-policy
X-Debian: DAK
X-Debian-Package: gimp
Debian: DAK
Debian-Changes: gimp_3.0.4-3+deb13u11_source.changes
Debian-Source: gimp
Debian-Version: 3.0.4-3+deb13u11
Debian-Architecture: source
Debian-Suite: proposed-updates
Debian-Archive-Action: accept
MIME-Version: 1.0
Subject: Bug#1146133: fixed in gimp 3.0.4-3+deb13u11
Content-Type: multipart/signed; micalg=&quot;pgp-sha256&quot;;
 protocol=&quot;application/pgp-signature&quot;;
 boundary=&quot;===============4321291776285703853==&quot;
Message-Id: &lt;E1x8iNd-00000008nwg-0RlJ@fasolo.debian.org&gt;
Date: Mon, 21 Sep 2026 18:04:41 +0000

--===============4321291776285703853==
Content-Type: text/plain; charset=&quot;utf-8&quot;
Content-Transfer-Encoding: quoted-printable

Source: gimp
Source-Version: 3.0.4-3+deb13u11
Done: Moritz M=C3=BChlenhoff &lt;jmm@debian.org&gt;

We believe that the bug you reported is fixed in the latest version of
gimp, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1146133@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Moritz M=C3=BChlenhoff &lt;jmm@debian.org&gt; (supplier of updated gimp package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 19 Sep 2026 17:17:20 +0200
Source: gimp
Architecture: source
Version: 3.0.4-3+deb13u11
Distribution: trixie-security
Urgency: medium
Maintainer: Debian GNOME Maintainers &lt;pkg-gnome-maintainers@lists.alioth.debi=
an.org&gt;
Changed-By: Moritz M=C3=BChlenhoff &lt;jmm@debian.org&gt;
Closes: 1145874 1145875 1146133
Changes:
 gimp (3.0.4-3+deb13u11) trixie-security; urgency=3Dmedium
 .
   * CVE-2026-92248
   * CVE-2026-90947
   * CVE-2026-82328 (Closes: #1146133)
   * CVE-2026-90948
   * CVE-2026-78465 (Closes: #1145875)
   * CVE-2026-78475 (Closes: #1145874)
Checksums-Sha1:
 13dda2ed30326c4690b903cd3e2e65b5f707f12e 3927 gimp_3.0.4-3+deb13u11.dsc
 a9c615e90389b65ecead2e9e0d04a565b6e5c0dc 86332 gimp_3.0.4-3+deb13u11.debian.=
tar.xz
 6f7048154eafa4f475cb64bde61d3d9b821fccc4 24914 gimp_3.0.4-3+deb13u11_amd64.b=
uildinfo
Checksums-Sha256:
 d4db578048a46b520dfe8dec836e5d16d302a70b1852ebc6193c5f41f6974710 3927 gimp_3=
.0.4-3+deb13u11.dsc
 f1110c39828bcb9ce8a4cca8ee544f034aeb8b3228970eeada64848760c1bbbf 86332 gimp_=
3.0.4-3+deb13u11.debian.tar.xz
 ff9127936247ec838d39aebf00ad8eb0f0cdec5862a31ac87eebd914dfae028f 24914 gimp_=
3.0.4-3+deb13u11_amd64.buildinfo
Files:
 815da2585a2e9f22e37267acfaba0ce3 3927 graphics optional gimp_3.0.4-3+deb13u1=
1.dsc
 8c4b0fd556408d77adcc1b0ecc9efcaa 86332 graphics optional gimp_3.0.4-3+deb13u=
11.debian.tar.xz
 3691b0d5a673607909c90b46bd9f701f 24914 graphics optional gimp_3.0.4-3+deb13u=
11_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmqu4zwACgkQEMKTtsN8
TjaReg/8DFDEzv4hquNwoFZHyq/8DoHcnrIk8BASOOHaaqZt/FtwI1qOpuPtpSm6
JP6YPkx/0hAb58wLeMAT/AwQEbMQmCPSPgdc1xLqndx9kcZSZUzrchpcdRa96qJi
mSssk3g64ZmI1vZSC4K+V+l2uLJLg3ERHza3d/hmjT97oq17dn0zHBof2robz7zQ
Q5N7GnluEvcKltVG0+mWR9zsRlbMUC3nAYXoLjaR/Tgf8LamKR2EoDte9uJybdH0
8HFge0zxVHPpjwfP/0QTKW7KV0H9k0fN6+UCTEnx3Xzs1PfpCbwQVZkHr2fI2D20
a8lGykLNteAuO0rWluhnYdiBTEPRE0UEWonlDgr0jxCFXL7Fxv7+dlKWNEODaNDa
fbN0iKh606D6RuzeE5XdLwOyX0mXY8TinlRMKSKtqwNN99SJQIyH+qsD84QD2b7L
pK6q/7lsR0KbTll61AObarma9jOrDq/sk71zA2r8HT2z7ZpBrPgsxQWyXm4WGtpb
VUc0fcOdikYFxyRBjyFlcH/edbUZvl4uxkTP1ULKHqLbRFN/5rq10UN0B/SgRKvt
1YP6JQkpqekHGE8+VGB5CTIZ29cO3Z0/SyGVzxi6ZgV8f0QzrZGMtJjZRqJ/dFqF
AvGALqV/BdYJw1uhBIwkCFB13o44l16/j/BamEZ96c4JHSUtRp4=3D
=3DGskM
-----END PGP SIGNATURE-----


--===============4321291776285703853==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCarFxuQAKCRCb9qggYcy5
IbRAAQC5+gAU0AJuundl3IuZ3K5cCa8IdKReB5VPmkA/VVI0/gD/fS8Oh4eJeMOy
fnNJRKrZgjkCl3S8JHnFOyPTlhVdRgk=
=r5dx
-----END PGP SIGNATURE-----

--===============4321291776285703853==--
]