Ubuntu 23.10 USN-6521-1: GIMP code execution threat update

ubuntu

November 29, 2023

GIMP could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

GIMP could be made to crash or run programs as your login if it

opened a specially crafted file.

Software Description:

- gimp: GNU Image Manipulation Program

Details:

It was discovered that GIMP incorrectly handled certain image files. If a

user were tricked into opening a specially crafted image, an attacker could

use this issue to cause GIMP to crash, resulting in a denial of service, or

possibly execute arbitrary code.

Topics Covered

security advisory denial of service code execution Ubuntu update instructions GIMP

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.10:
   gimp                            2.10.34-1ubuntu0.23.10.1

Ubuntu 23.04:
   gimp                            2.10.34-1ubuntu0.23.04.1

Ubuntu 22.04 LTS:
   gimp                            2.10.30-1ubuntu0.1

Ubuntu 20.04 LTS:
   gimp                            2.10.18-1ubuntu0.1

In general, a standard system update will make all the necessary changes.