lp://staging/ubuntu/quantal-security/gimp

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

76. By Marc Deslauriers on 2013-12-06

* SECURITY UPDATE: denial of service and possible code execution via
  huge color maps in xwd plugin
  - debian/patches/CVE-2013-1913.patch: limit number of color map entries
    in plug-ins/common/file-xwd.c.
  - CVE-2013-1913
* SECURITY UPDATE: denial of service and possible code execution via
  large number of color map entries in xwd plugin
  - debian/patches/CVE-2013-1978.patch: validate number of color map
    entries in plug-ins/common/file-xwd.c
  - CVE-2013-1978

75. By Marc Deslauriers on 2012-12-06

* SECURITY UPDATE: code execution via malformed xwd files
  - debian/patches/CVE-2012-5576.patch: validate sizes in
    plug-ins/common/file-xwd.c.
  - CVE-2012-5576

74. By Robert Ancell on 2012-09-19

* Merge from Debian unstable (LP: #1050831). Remaining Ubuntu changes:
* debian/control:
  - Update description
  - Build-depend on libtiff-dev instead of libtiff4-dev.
* debian/rules:
  - Set gettext domain and update translation templates
* debian/patches/02_help-message.patch:
* debian/patches/03_gimp.desktop.in.in.patch:
  - Update some strings for Ubuntu

73. By Marc Deslauriers on 2012-09-05

* SECURITY UPDATE: denial of service via malformed .fit file header
  - debian/patches/CVE-2012-3236.patch: check for valid XTENSION header
    in plug-ins/file-fits/fits-io.c.
  - CVE-2012-3236
* SECURITY UPDATE: denial of service and possible code execution via
  crafted KiSS palette file
  - debian/patches/CVE-2012-3403.patch: validate return codes and header
    data in plug-ins/common/file-cel.c.
  - CVE-2012-3403
* SECURITY UPDATE: denial of service and possible code execution via
  crafted GIF image file
  - debian/patches/CVE-2012-3481.patch: validate sizes, and prevent
    overflows in plug-ins/common/file-gif-load.c.
  - CVE-2012-3481

72. By Serge Hallyn on 2012-07-11

debian/control: specify libtiff-dev in place of libtiff4-dev.

71. By Micah Gersten on 2012-05-20

* Merge from Debian unstable (LP: #908472). Remaining Changes:
  - debian/patches/02_help-message.patch,
    debian/patches/03_gimp.desktop.in.in.patch:
    + Update some strings for Ubuntu
  - debian/control:
    + Update description
  - debian/rules:
    + Set gettext domain and update translation templates
* Drop the following patches that were applied upstream:
  - debian/patches/ghost-cursor.patch: fix Wacom tablet cursor events
  - debian/patches/embed-page-setup-dialog.patch

70. By Micah Gersten on 2012-02-22

* Merge from Debian unstable (LP: #925674). Remaining Changes:
  - debian/patches/02_help-message.patch,
    debian/patches/03_gimp.desktop.in.in.patch:
    + Update some strings for Ubuntu
  - debian/patches/ghost-cursor.patch: fix Wacom tablet cursor events
  - debian/control:
    + Update description
  - debian/rules:
    + Set gettext domain and update translation templates

* Drop poppler patch as it's been applied upstream
  - drop debian/patches/poppler0.18.patch
  - update debian/patches/series
* fix LP: #680521 - Embed page setup dialog functionality in the print dialog
  - add debian/patches/embed-page-setup-dialog.patch
  - update debian/patches/series

69. By Michael Terry on 2012-01-19

* debian/patches/ghost-cursor.patch:
  - Backport patch from git trunk to fix Wacom tablet cursor events
    by ignoring the history buffer by default. LP: #863154

68. By Martin Pitt on 2011-12-06

Add poppler0.18.patch: Port file-pdf plugin to poppler 0.18 API. Patch
taken from Fedora.

67. By Marc Deslauriers on 2011-10-29

* Merge from debian testing. Remaining changes:
  - debian/patches/02_help-message.patch,
    debian/patches/03_gimp.desktop.in.in.patch:
    + Update some strings for Ubuntu
  - debian/control:
    + Update description
  - debian/rules:
    + Set gettext domain and update translation templates