+++ This bug was initially created as a clone of Bug #22252 +++ CVEs have been assigned for several security issues in the GIMP: http://openwall.com/lists/oss-security/2017/12/20/1 Debian has issued an advisory for this on December 30: https://www.debian.org/security/2017/dsa-4077 Patched packages uploaded for Mageia 5 and Cauldron. Mageia 6 is having a build issue, so will deal with that later. Advisory: ======================== Updated gimp packages fix security vulnerabilities: Several vulnerabilities were discovered in the GIMP which could result in denial of service (application crash) or potentially the execution of arbitrary code if malformed files are opened (CVE-2017-17784, CVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17788, CVE-2017-17789). References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17784 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17785 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17786 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17787 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17788 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17789 https://www.debian.org/security/2017/dsa-4077 ======================== Updated packages in core/updates_testing: ======================== gimp-2.8.14-4.3.mga5 libgimp2.0-devel-2.8.14-4.3.mga5 libgimp2.0_0-2.8.14-4.3.mga5 gimp-python-2.8.14-4.3.mga5 from gimp-2.8.14-4.3.mga5.src.rpm
On real hardware, 64-bit server kernel, nvidia graphics. Installed gimp and libgimp, loaded an old map image with 68 layers, attempted several basic manipulations of the image and layers. Everything looked good. OK for 64-bit on this hardware.
CC: (none) => andrewsfarmWhiteboard: (none) => MGA5-64-OK
CC: (none) => davidwhodginsKeywords: (none) => advisory
A good 64-bit test, just one release -> validation. Being a fan of Gimp, I played with the update as well. All OK. There is a chronic problme with Gimp of some of its dialogues being too tall, with the bottom (important buttons) chopped off behind taskbars. Upstream or us?
Keywords: (none) => validated_updateCC: (none) => lewyssmith, sysadmin-bugs
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2018-0030.html
Status: NEW => RESOLVEDResolution: (none) => FIXED
(In reply to Lewis Smith from comment #2) > A good 64-bit test, just one release -> validation. > Being a fan of Gimp, I played with the update as well. All OK. > There is a chronic problme with Gimp of some of its dialogues being too > tall, with the bottom (important buttons) chopped off behind taskbars. > Upstream or us? I'm not seeing that on my display. Gimp has so many ways to customize it that I'm inclined to think it may be one or more of your settings that's the problem. One thing that used to bother me was that Gimp would put its windows where it wanted them, instead of where I did. That was before I discovered the setting to "Save window positions when closing."