Ubuntu Security Notice 3539-1 - It was discovered that GIMP incorrectly handled certain images. If a user were tricked into opening a specially crafted image, an attacker could possibly use this to execute arbitrary code.
3641dd9bb53edd38c2a51f004e4ad926b0b6156f946c2ee3e0373eedd2561f61
===========================================================================
Ubuntu Security Notice USN-3539-1
January 22, 2018
gimp vulnerabilities
===========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in GIMP.
Software Description:
- gimp: The GNU Image Manipulation Program
Details:
It was discovered that GIMP incorrectly handled certain images. If a
user were tricked into opening a specially crafted image, an attacker
could possibly use this to execute arbitrary code. (CVE-2017-17784,
CVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17788,
CVE-2017-17789)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 14.04 LTS:
gimp=C2=A02.8.10-0ubuntu1.2
libgimp2.0=C2=A02.8.10-0ubuntu1.2
In general, a standard system update will make all the necessary
changes.
References:
https://www.ubuntu.com/usn/usn-3539-1
CVE-2017-17784, CVE-2017-17785, CVE-2017-17786, CVE-2017-17787,
CVE-2017-17788, CVE-2017-17789
Package Information:
https://launchpad.net/ubuntu/+source/gimp/2.8.10-0ubuntu1.2