[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-2760/gimp with complete fix

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
331f1e86 by Salvatore Bonaccorso at 2025-07-03T05:50:48+02:00
Track fixed version for CVE-2025-2760/gimp with complete fix

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -25377,7 +25377,7 @@ CVE-2025-2761 (GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution V
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/issues/13073
 	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/0806bc76ca74543d20e1307ccf6aebd26395c56c (GIMP_3_0_0)
 CVE-2025-2760 (GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerabi ...)
-	- gimp <unfixed> (bug #1107758)
+	- gimp 3.0.4-3 (bug #1107758)
 	NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-203/
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/issues/12790
 	NOTE: Original fix incomplete (for 32bit systems):



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/331f1e868cd135b3f4fd2ac7b519ba3438a570ae

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/331f1e868cd135b3f4fd2ac7b519ba3438a570ae
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250703/40767105/attachment-0001.htm>