[Git][security-tracker-team/security-tracker][master] update gimp references

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3cbf6c3f by Moritz Muehlenhoff at 2026-10-07T14:07:17+02:00
update gimp references

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -362,15 +362,22 @@ CVE-2026-106444 (Handlebars provides the power necessary to let users build sema
 CVE-2026-106063 (A heap-based buffer overflow was found in GIMP\u2019s DICOM export plu ...)
 	- gimp <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2546668
-	TODO: check upstream status
+	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/3030
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/3781714d500a632640b64da0097f6e9864201eab
+	NOTE: Fixed by:	https://gitlab.gnome.org/GNOME/gimp/-/commit/4ad98bc5b897ed7fa2fa60e69509024d21dd2832
+	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16801
 CVE-2026-106062 (A heap-based buffer overflow was found in GIMP\u2019s DirectDraw Surfa ...)
 	- gimp <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2546654
-	TODO: check upstream status
+	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16801
+	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/3045
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/d528365f7644099d8e07f999660ed0aa71210d85
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/01e6663942adebb347d11ffc7d94ac23da01ff62
 CVE-2026-106061 (A flaw was found in GIMP\u2019s X cursor (XMC) thumbnail loader. When  ...)
 	- gimp <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2546640
-	TODO: check upstream status
+	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16801
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/8937990bcb4f0b8a377f49e416ec9b3f07d49675
 CVE-2026-106032 (Server-side request forgery in the OpenAPI schema processing of the ag ...)
 	NOT-FOR-US: Amazon
 CVE-2026-105812 (Improper control of code generation in the agent import functionality  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3cbf6c3f34f457f3ae514544e91963bffed1bade

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3cbf6c3f34f457f3ae514544e91963bffed1bade
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261007/038712e1/attachment.htm>