[Pkg-gnome-extras-maintainers] Bug#1132846: gimp - Insecurely creates /tmp/gimp/3.2

[Paul Gevers]

Control: fixed -1 3.2.4-2

Hi,

On Wed, 24 Jun 2026 09:51:00 +0200 Nicola Chiapolini 
<nicola.chiapolini at physik.uzh.ch> wrote:
> After seeing the message from Vincent I upgraded as well.
> 
> I can confirm Vincent's observation. With gimp 3.2.4-2 directories like
> /tmp/gimp-3.2-XQ2UZQ3 and /tmp/gimp-3.2-XXRJER3 are created. Access is 
> limited to my user.

That's my observation as well, so lets document that the version in 
unstable is fixed. (I'm not closing the bug just yet, to allow for 
further inspection/tracking).

Paul

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 585 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnome-extras-maintainers/attachments/20260627/f48951dd/attachment-0001.sig>