-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 16 Feb 2026 17:20:06 +0100
Source: gimp
Binary: gimp gimp-dbgsym libgimp2.0 libgimp2.0-dbgsym libgimp2.0-dev libgimp2.0-dev-dbgsym
Architecture: mips64el
Version: 2.10.34-1+deb12u8
Distribution: bookworm-security
Urgency: high
Maintainer: mipsel Build Daemon (mipsel-osuosl-03) <buildd_mips64el-mipsel-osuosl-03@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 gimp       - GNU Image Manipulation Program
 libgimp2.0 - Libraries for the GNU Image Manipulation Program
 libgimp2.0-dev - Headers and other files for compiling plugins for GIMP
Closes: 1127838 1127841 1127842
Changes:
 gimp (2.10.34-1+deb12u8) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * plug-ins: fix PSD loader: heap-buffer-overflow in fread_pascal_string
     (CVE-2026-2239) (Closes: #1127838)
   * Fix PSP File Parsing Integer Overflow Leading to Heap Corruption
     (CVE-2026-2271) (Closes: #1127841)
   * plug-ins: Add overflow checks for ICO loading (CVE-2026-2272)
     (Closes: #1127842)
   * plug-ins: fix crash due to uninitialized ptr_array when loading a specially
     crafted PSD
Checksums-Sha1:
 941e067815d24c5800d2b47f896881df0479dc83 16294380 gimp-dbgsym_2.10.34-1+deb12u8_mips64el.deb
 82efca0083f1de731dd4c672adbdffed62ddaa3a 21046 gimp_2.10.34-1+deb12u8_mips64el-buildd.buildinfo
 00410fe8d29322f8009ae74cc1a3842094a449c7 3658324 gimp_2.10.34-1+deb12u8_mips64el.deb
 f2c3c1874b76b32913ff0fdfe64d6d491ac7ab31 1415092 libgimp2.0-dbgsym_2.10.34-1+deb12u8_mips64el.deb
 a2a2556366fcee8bdf840bdac6cad0db91973b25 17876 libgimp2.0-dev-dbgsym_2.10.34-1+deb12u8_mips64el.deb
 fb9ecdab37ee8c2e9ec581ce0b93c6d35e45c488 120596 libgimp2.0-dev_2.10.34-1+deb12u8_mips64el.deb
 c2164651e444d720389a8a8a1dac51cd91821228 725416 libgimp2.0_2.10.34-1+deb12u8_mips64el.deb
Checksums-Sha256:
 58a369f6dcb7f23fe47ae136615b6f043565f17dd6d38718f27c2a209ae170f1 16294380 gimp-dbgsym_2.10.34-1+deb12u8_mips64el.deb
 0090c2c3df8bf2bcd6f2f9d8b055c2faece06378d25c502c282d5108ea97bfeb 21046 gimp_2.10.34-1+deb12u8_mips64el-buildd.buildinfo
 b2b198d549a5f2008a92aa4a158cb9486652546d711c45bc6c68a6e612578db0 3658324 gimp_2.10.34-1+deb12u8_mips64el.deb
 b414926902ace770925ad5108637c9cf506764495afa63e29758450a395c70b7 1415092 libgimp2.0-dbgsym_2.10.34-1+deb12u8_mips64el.deb
 7c664be17ea5c94d368bdf26fbc467aa063f4d3110fc1a079f89eb3f00c2de8e 17876 libgimp2.0-dev-dbgsym_2.10.34-1+deb12u8_mips64el.deb
 fc5fcc15da95bd9695c14651496cc2b55e9f09feca61ab5c7d0fdd984a3b9d9c 120596 libgimp2.0-dev_2.10.34-1+deb12u8_mips64el.deb
 071226dbc01de7b240a3d843b42aa9a666527b51a78a6c4191689f4e54209941 725416 libgimp2.0_2.10.34-1+deb12u8_mips64el.deb
Files:
 e0767f1f76fd3616f033b6e99722b622 16294380 debug optional gimp-dbgsym_2.10.34-1+deb12u8_mips64el.deb
 60cae500b10086cda14044b7ef5b803e 21046 graphics optional gimp_2.10.34-1+deb12u8_mips64el-buildd.buildinfo
 4acafa54ae75ad92ed60c9f0361dc3f0 3658324 graphics optional gimp_2.10.34-1+deb12u8_mips64el.deb
 f437ac2589425eb2cf88b1dd9f47d7a8 1415092 debug optional libgimp2.0-dbgsym_2.10.34-1+deb12u8_mips64el.deb
 36b9b9fa7e799b163e4d293236ca90f8 17876 debug optional libgimp2.0-dev-dbgsym_2.10.34-1+deb12u8_mips64el.deb
 94ccbc1fa6ef75473e0be2ceffbb3d61 120596 libdevel optional libgimp2.0-dev_2.10.34-1+deb12u8_mips64el.deb
 90f8ea86e50db3d47988e2fa08096ab4 725416 libs optional libgimp2.0_2.10.34-1+deb12u8_mips64el.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEesE3YcWKZXIkRPMemf85J+x5/aoFAmmTe3AACgkQmf85J+x5
/arQzxAAgAOYuwCLljjYhNkC7PdwjBc1dLmpfacP+DppJBlps6i/EckcGUchTqMW
cTqOeq4rAoTSPN1PPJG61pJoQqFlHhw6unOeZqpi/WbX8gzJ666+xefkatU9dtYN
iW5BBtqBghA39MdoDeHQ4VczwUiU8O49/eizA0GUsUPQ9LyANe0TosnNoUhZf6y4
jHiGuJnAOHxqC5xLTULeDsovUzsvcYP3fZC+nPfpCPkWNIhxvx4vqb8rXyA4KGCE
TzrnKBB9uwB2Mey4qTbkyWM96pojKf4aWuoUa88LeeKRlsb8DIAzfyiw5JD6Gtt1
yH3zZSKQ3/qNRAWqoeqgNoV6gGqmeRRtz0Ixx0kRI4o3b14HitBOOjunDn2rA14E
zQJiWOzijAvX1Wihs7uzCEpdrd6DBhwoEgsov8EKR7+9yBqG90QZj4eC/ytwZVkX
+22hb+8fAo3RZuP57PQTre7cFuI5T8Ivk2Ek3fYLCgsBWbLQXUMD1/5CpY6hyDYQ
J7U5js76N97UqpsHoeeKC0EAolRREZJCqnhjOYuoOPtRO8/4au5DTWLvqVI8dk89
ZFLoMpvDm08brlzqmZ+N7CthyPMX9pzaVz4071QY0peVgjvr+r8vbzYVZEFIGrh8
tqMsUoAIfliinliZJWgNMtMQl2vwMqvBrsfTbL5hKpk+oNoI9ew=
=qhBF
-----END PGP SIGNATURE-----