[Git][security-tracker-team/security-tracker][master] Add new gimp issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c5d64563 by Salvatore Bonaccorso at 2026-10-20T14:46:05+02:00
Add new gimp issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -340,13 +340,27 @@ CVE-2026-112299 (A vulnerability was determined in smrealms smr up to f40380c017
 CVE-2026-112297 (A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. Th ...)
 	NOT-FOR-US: ptbsare anx-calibre-manager
 CVE-2026-112261 (A flaw was found in GIMP. Opening a crafted XCF that selects a path an ...)
-	TODO: check
+	- gimp <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2555748
+	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16866
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/9ab2b89cbb4c62e72ce50e6430451cad11f15950 (gimp-3-2 branch)
+	TODO: check, double if isolated correct commit, relation to CVE-2026-112258
 CVE-2026-112260 (A flaw was found in GIMP. Opening a crafted XCF with a malformed text- ...)
-	TODO: check
+	- gimp <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2555730
+	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16865
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/4b54ae3548f91fd3e4bb5710f2b8b8e311a9d955 (gimp-3-2 branch)
 CVE-2026-112258 (A flaw was found in GIMP. The XCF loader can leave a dangling pointer  ...)
-	TODO: check
+	- gimp <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2555588
+	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16866
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/9ab2b89cbb4c62e72ce50e6430451cad11f15950 (gimp-3-2 branch)
+	TODO: check, double if isolated correct commit,relation to CVE-2026-112261
 CVE-2026-112257 (A flaw was found in GIMP. The PSD thumbnail resource loader performs a ...)
-	TODO: check
+	- gimp <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2555574
+	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16862
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/b89635399d4b92f0b2872c627ef5966583603537 (gimp-3-2 branch)
 CVE-2026-112254 (A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affec ...)
 	TODO: check
 CVE-2026-112148 (A vulnerability has been identified in LIFF SDK versions 2.20.0 throug ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c5d64563ede45db15636c11c8659d3f89d059884

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c5d64563ede45db15636c11c8659d3f89d059884
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261020/b60d24a8/attachment.htm>