lp:ubuntu/lucid-security/gimp

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

55. By Marc Deslauriers on 2012-12-06

* SECURITY UPDATE: code execution via malformed xwd files
  - debian/patches/13_CVE-2012-5576.patch: validate sizes in
    plug-ins/common/file-xwd.c.
  - CVE-2012-5576

54. By Marc Deslauriers on 2012-09-05

* SECURITY UPDATE: denial of service via malformed .fit file header
  - debian/patches/10_CVE-2012-3236.patch: check for valid XTENSION
    header in plug-ins/file-fits/fits-io.c.
  - CVE-2012-3236
* SECURITY UPDATE: denial of service and possible code execution via
  crafted KiSS palette file
  - debian/patches/11_CVE-2012-3403.patch: validate return codes and
    header data in plug-ins/common/file-cel.c.
  - CVE-2012-3403
* SECURITY UPDATE: denial of service and possible code execution via
  crafted GIF image file
  - debian/patches/12_CVE-2012-3481.patch: validate sizes, and prevent
    overflows in plug-ins/common/file-gif-load.c.
  - CVE-2012-3481

53. By Marc Deslauriers on 2011-09-21

* SECURITY UPDATE: possible arbitrary code execution via malformed GIF
  - debian/patches/09_CVE-2011-2896.patch: properly calculate lengths in
    plug-ins/common/file-gif-load.c.
  - CVE-2011-2896

52. By Marc Deslauriers on 2011-06-08

* SECURITY UPDATE: denial of service and possible code execution via
  malformed PSP image file
  - debian/patches/08_CVE-2011-1782.patch: further fix buffer overflow in
    plug-ins/common/file-psp.c.
  - CVE-2011-1782

51. By Marc Deslauriers on 2011-04-07

* SECURITY UPDATE: denial of service and possible code execution via
  malformed plugin configuration files
  - debian/patches/05_CVE-2010-454x.patch: fix format strings in
    plug-ins/{common/sphere-designer,gfig/gfig-style,
    lighting/lighting-ui}.c.
  - CVE-2010-4540
  - CVE-2010-4541
  - CVE-2010-4542
* SECURITY UPDATE: denial of service and possible code execution via
  malformed PSP image file
  - debian/patches/06_CVE-2010-4543.patch: fix buffer overflow in
    plug-ins/common/file-psp.c.
  - CVE-2010-4543

50. By Didier Roche-Tolomelli on 2010-02-26

* Merge with debian, remaining changes:
  + debian/patches/02_help-message.patch,
    debian/patches/03_gimp.desktop.in.in.patch:
    - updated some strings for ubuntu
  + debian/rules:
    - updated translation templates
  + debian/control:
    - set Vcs-Bzr url

49. By Sebastien Bacher on 2009-11-26

* Sync on Debian
* debian/patches/02_help-message.patch,
  debian/patches/03_gimp.desktop.in.in.patch:
  - updated some strings for ubuntu
* debian/control:
  - Drop webkit build dependency. gimp is the only thing pulling in webkit
    for the desktop CDs, and makes them explode. Without the webkit help
    browser plugin, help will just be displayed in the default browser.
  - set vcs url
* debian/rules:
  - updated translation templates

48. By Robert Ancell on 2009-08-31

* Merge with Debian unstable (LP: #419593), remaining changes:
  - debian/patches/02_help-message.patch,
    debian/patches/03_gimp.desktop.in.in.patch:
    + updated some strings for ubuntu
  - debian/rules:
    + updated translation templates
  - debian/control:
    + Drop webkit build dependency. gimp is the only thing pulling in webkit
      for the desktop CDs, and makes them explode. Without the webkit help
      browser plugin, help will just be displayed in the default browser.
* debian/patches/01_debian-gimprc.patch:
  - Updated
* debian/control:
  - Added a BZR link

47. By Martin Pitt on 2009-07-17

debian/control: Re-add missing comma in the build-dependency line, to make
sure that all build depends are used again. (LP: #391557)

46. By Iain Lane on 2009-06-21

* Merge with Debian unstable (LP: #389900), remaining changes:
  - debian/patches/02_help-message.patch,
    debian/patches/03_gimp.desktop.in.in.patch:
    + updated some strings for ubuntu
  - debian/rules:
    + updated translation templates
  - debian/control:
    + Drop webkit build dependency. gimp is the only thing pulling in webkit
      for the desktop CDs, and makes them explode. Without the webkit help
      browser plugin, help will just be displayed in the default browser.