ELA-1391-1 gimp security update

out-of-bounds write

2025-04-14
Packagegimp
Version2.8.18-1+deb9u3 (stretch), 2.10.8-2+deb10u2 (buster)
Related CVEs CVE-2025-2761


Out-of-bounds write in FLI (AutoDesk FLIC animation) file parsing has been fixed in GIMP, the GNU Image Manipulation Program.



For Debian 10 buster, these problems have been fixed in version 2.10.8-2+deb10u2.

For Debian 9 stretch, these problems have been fixed in version 2.8.18-1+deb9u3.

We recommend that you upgrade your gimp packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.