bugtraq - Re: [ GLSA 200607-08 ] GIMP: Buffer overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 24 Jul 2006 19:11:25 +0300
From: Michael Shigorin <mike@...n.org.ua>
To: bugtraq@...urityfocus.com
Subject: Re: [ GLSA 200607-08 ] GIMP: Buffer overflow

On Sun, Jul 23, 2006 at 05:29:59PM +0200, Sune Kloppenborg Jeppesen wrote:
>     -------------------------------------------------------------------
>      Package         /  Vulnerable  /                       Unaffected
>     -------------------------------------------------------------------
>   1  media-gfx/gimp      < 1.2.12                            >= 1.2.12
[...]
>     # emerge --sync
>     # emerge --ask --oneshot --verbose ">=media-gfx/gimp-1.2.12"

I think it was "2.2.12".

PS: if anyone still needs a minimal patch, here's an extract from
Ubuntu advisory source package:

http://paq.osdn.org.ua/~mike/tmp/gimp-2.2.8-ubuntu-CVE-2006-3404.patch

-- 
 ---- WBR, Michael Shigorin <mike@...linux.ru>
  ------ Linux.Kiev http://www.linux.kiev.ua/

Content of type "application/pgp-signature" skipped