[Git][security-tracker-team/security-tracker][master] gimp fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3ea57a93 by Moritz Muehlenhoff at 2026-09-12T17:12:36+02:00
gimp fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -42366,7 +42366,7 @@ CVE-2026-59233 (Missing Authorization in the permission management component in
 CVE-2026-59112 (Improper verification of cryptographic signature and Improper Check fo ...)
 	NOT-FOR-US: Estonian Information System Authority (RIA)
 CVE-2026-59091 (A flaw was found in GIMP's file format plugins, including those for PS ...)
-	- gimp <unfixed> (bug #1144520)
+	- gimp 3.2.6-1 (bug #1144520)
 	[trixie] - gimp <not-affected> (Vulnerable code not present)
 	[bookworm] - gimp <not-affected> (Vulnerable code not present)
 	[bullseye] - gimp <not-affected> (Vulnerable code not present)
@@ -42375,16 +42375,16 @@ CVE-2026-59091 (A flaw was found in GIMP's file format plugins, including those
 	NOTE: Introduced by: https://gitlab.gnome.org/GNOME/gimp/-/commit/901d1cd9d9680927e76001ad13411fe0df922300 (GIMP_3_1_4)
 CVE-2026-59090 (A flaw was found in GIMP's PSD file format plugin. This vulnerability, ...)
 	{DSA-6470-1}
-	- gimp <unfixed> (bug #1144526)
+	- gimp 3.2.6-1 (bug #1144526)
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16509
 	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/612c7e0a5775e7883789022c61f85a1c82c05505
 CVE-2026-59088 (A flaw was found in GIMP. A signed integer overflow vulnerability exis ...)
 	{DSA-6470-1}
-	- gimp <unfixed> (bug #1144528)
+	- gimp 3.2.6-1 (bug #1144528)
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16492
 	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/1db4690bde3a349df046f85a4ee9a71af8492216
 CVE-2026-59087 (A flaw was found in the GIMP image manipulation program, specifically  ...)
-	- gimp <unfixed> (bug #1144529)
+	- gimp 3.2.6-1 (bug #1144529)
 	[trixie] - gimp <not-affected> (Vulnerable code not present)
 	[bookworm] - gimp <not-affected> (Vulnerable code not present)
 	[bullseye] - gimp <not-affected> (Vulnerable code not present)
@@ -54706,16 +54706,16 @@ CVE-2026-64537 (In the Linux kernel, the following vulnerability has been resolv
 	NOTE: https://git.kernel.org/linus/f3e02edd8322b31b8e6517faa6ba053bf29d1e26 (7.2-rc1)
 CVE-2026-66759 (A flaw was found in the file-icns plugin in GIMP. When applying a deco ...)
 	{DSA-6470-1}
-	- gimp <unfixed> (bug #1142992)
+	- gimp 3.2.6-1 (bug #1142992)
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/issues/16528
 	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/abb3129a8ecb79bf3af6df03bc35ddf8f7aaba20
 CVE-2026-66758 (A flaw was found in the file-fits plugin in GIMP. When processing a FI ...)
 	{DSA-6470-1}
-	- gimp <unfixed> (bug #1142991)
+	- gimp 3.2.6-1 (bug #1142991)
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/issues/16528
-	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/89ae907fea5ccc8bd1f626dbe01fdcfe29940ac9
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/89ae907fea5ccc8bd1f626dbe01fdcfe29940ac9 (GIMP_3_2_6)
 CVE-2026-66757 (A flaw was found in the file-sgi plugin in GIMP. When processing an RL ...)
-	- gimp <unfixed> (bug #1142990)
+	- gimp 3.2.6-1 (bug #1142990)
 	[trixie] - gimp <no-dsa> (Minor issue)
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16494
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2884
@@ -74720,7 +74720,7 @@ CVE-2026-45094
 	[bullseye] - fastdds <postponed> (Minor issue; DoS via crafted input, vulnerable code present)
 	NOTE: Fixed by: https://github.com/eProsima/Fast-DDS/commit/d9f4b373c90179c96f3b1542e72f16e282ef0104 (v3.6.2)
 CVE-2026-59089 (A flaw was found in GIMP. The PlayStation TIM loader, responsible for  ...)
-	- gimp <unfixed> (bug #1143023)
+	- gimp 3.2.6-1 (bug #1143023)
 	[trixie] - gimp <not-affected> (Vulnerable code introduced later)
 	[bookworm] - gimp <not-affected> (PlayStation TIM loader plug-ins/common/file-tim.c added in GIMP 3.x; 2.10 has no such loader)
 	[bullseye] - gimp <not-affected> (PlayStation TIM loader plug-ins/common/file-tim.c added in GIMP 3.x; 2.10 has no such loader)
@@ -75793,7 +75793,7 @@ CVE-2026-59234 (Authorization Bypass Through User-Controlled Key (CWE-639) in Ca
 	NOT-FOR-US: Prospero Flow CRM
 CVE-2026-58379 (A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. Th ...)
 	{DSA-6470-1}
-	- gimp <unfixed> (bug #1141415)
+	- gimp 3.2.6-1 (bug #1141415)
 	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/issues/16205
 	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/b630f167ba7b73b17e7dd6df1fee1623f8324575
 CVE-2026-56085 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3ea57a93d642a90dc10aeba4d664de9db33ec97b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3ea57a93d642a90dc10aeba4d664de9db33ec97b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260912/bbc61082/attachment.htm>