Debian/gimp: critical 9.1
GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file function in app/test
Action: Upgrade gimp to 3.0.0~RC1-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.0~RC1-4 | - |
Fixed versions
| 3.0.0~RC1-4 |
Sources
- osv: DEBIAN-CVE-2018-12713#Debian:14/gimp
- https://security-tracker.debian.org/tracker/CVE-2018-12713
published · modified · JSON