[Git][security-tracker-team/security-tracker][master] Add CVE-2026-2271/gimp

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
84573d09 by Salvatore Bonaccorso at 2026-02-11T09:18:19+01:00
Add CVE-2026-2271/gimp

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -64,6 +64,11 @@ CVE-2026-2272 [ICO import integer overflow bypass leads to heap buffer overflow]
 	- gimp <unfixed>
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/issues/15617
 	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/058ada8f3ffc0a42b7dd1561a8817c8cc83b7d2a
+CVE-2026-2271 [GIMP PSP File Parsing Integer Overflow Leading to Heap Corruption]
+	- gimp <unfixed>
+	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/issues/15732
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/d9d0f5b4e642dd5b101e70728042027d568bb01d
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/0e63f096fa5f7dc3fae0a8e865fd5a05ebe45da8 (GIMP_3_0_8)
 CVE-2025-14594
 	- gitlab <not-affected> (Vulnerable code not present)
 CVE-2026-1282



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/84573d09a25d03871c0493d0d621754b6208e234

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/84573d09a25d03871c0493d0d621754b6208e234
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260211/82d18bdf/attachment.htm>