[SECURITY] [DSA 6509-1] gimp security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6509-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
September 20, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : gimp
CVE ID : CVE-2026-78465 CVE-2026-78475 CVE-2026-82328
CVE-2026-90947 CVE-2026-90948 CVE-2026-92248
Several vulnerabilities were discovered in GIMP, the GNU Image
Manipulation Program, which could result in denial of service
or potentially the execution of arbitrary code if malformed
PSD, light effects filter, ICO, PIX or PCX files are opened.
For the stable distribution (trixie), these problems have been fixed in
version 3.0.4-3+deb13u11.
We recommend that you upgrade your gimp packages.
For the detailed security status of gimp please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/gimp
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----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=zhQm
-----END PGP SIGNATURE-----
Reply to: