Login
Newsletter
Werbung

Sicherheit: Zwei Probleme in GIMP
Aktuelle Meldungen Distributionen
Name: Zwei Probleme in GIMP
ID: FEDORA-2012-12293
Distribution: Fedora
Plattformen: Fedora 18
Datum: Di, 18. September 2012, 13:25
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3403
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3481
Applikationen: GIMP

Originalnachricht

Name        : gimp
Product : Fedora 18
Version : 2.8.2
Release : 1.fc18
URL : http://www.gimp.org/
Summary : GNU Image Manipulation Program
Description :
GIMP (GNU Image Manipulation Program) is a powerful image composition and
editing program, which can be extremely useful for creating logos and other
graphics for webpages. GIMP has many of the tools and filters you would expect
to find in similar commercial offerings, and some interesting extras as well.
GIMP provides a large image manipulation toolbox, including channel operations
and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all
with multi-level undo.

-------------------------------------------------------------------------------
-
Update Information:

Among other things this update fixes security and stability issues in various
image format loaders. Security issues fixed include CVE-2012-3403 and CVE-2012-3481.


Overview of Changes from GIMP 2.8.0 to GIMP 2.8.2
=================================================


Core:

- Make tag matching always case-insensitive
- Let the tile-cache-size default to half the physical memory


GUI:

- Mention that the image was exported in the close warning dialog
- Make sure popup windows appear on top on OSX
- Allow file opening by dropping to the OSX dock
- Fix the visibility logic of the export/overwrite menu items
- Remove all "Use GEGL" menu items, they only add bugs and zero
function
- Improve performance of display filters, especially color management
- Fix the image window title to comply with the save/export spec
and use the same image name everywhere, not only in the title
- Fix positioning of pasted/dropped stuff to be more reasonable


Libgimp:

- Move gimpdir and thumbnails to proper locations on OSX
- Implement relocation on OSX
- Allow to use $(gimp_installation_dir) in config files


Plug-ins:

- Fix remembering of JPEG load/save defaults
- Revive the page setup dialog on Windows


Source and build system:

- Add Windows installer infrastructure
- Add infrastructure to build GIMP.app on OSX


General:

- Lots of bug fixes
- List of translation updates
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #839020 - CVE-2012-3403 gimp (CEL plug-in): heap buffer overflow
when loading external palette files
https://bugzilla.redhat.com/show_bug.cgi?id=839020
[ 2 ] Bug #847303 - CVE-2012-3481 Gimp (GIF plug-in): Heap-based buffer
overflow by loading certain GIF images
https://bugzilla.redhat.com/show_bug.cgi?id=847303
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update gimp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung