-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 16 Feb 2026 17:20:06 +0100
Source: gimp
Binary: gimp gimp-dbgsym libgimp2.0 libgimp2.0-dbgsym libgimp2.0-dev libgimp2.0-dev-dbgsym
Architecture: mipsel
Version: 2.10.34-1+deb12u8
Distribution: bookworm-security
Urgency: high
Maintainer: mipsel Build Daemon (mipsel-osuosl-04) <buildd_mips64el-mipsel-osuosl-04@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 gimp       - GNU Image Manipulation Program
 libgimp2.0 - Libraries for the GNU Image Manipulation Program
 libgimp2.0-dev - Headers and other files for compiling plugins for GIMP
Closes: 1127838 1127841 1127842
Changes:
 gimp (2.10.34-1+deb12u8) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * plug-ins: fix PSD loader: heap-buffer-overflow in fread_pascal_string
     (CVE-2026-2239) (Closes: #1127838)
   * Fix PSP File Parsing Integer Overflow Leading to Heap Corruption
     (CVE-2026-2271) (Closes: #1127841)
   * plug-ins: Add overflow checks for ICO loading (CVE-2026-2272)
     (Closes: #1127842)
   * plug-ins: fix crash due to uninitialized ptr_array when loading a specially
     crafted PSD
Checksums-Sha1:
 362545239578421c02d555c697212f6abfa99847 15996588 gimp-dbgsym_2.10.34-1+deb12u8_mipsel.deb
 17f2fea77cae472cbc0b9640941f2d1eec3e711d 20999 gimp_2.10.34-1+deb12u8_mipsel-buildd.buildinfo
 fc8328fb161e9c6df8597c90986944967a42a1f5 3772268 gimp_2.10.34-1+deb12u8_mipsel.deb
 ce44d0dd5104106bf0bf8bc0805a1f14f3b64320 1395784 libgimp2.0-dbgsym_2.10.34-1+deb12u8_mipsel.deb
 9b1aaef973f77ae17c3a8ff695a6ef96e747dad1 17112 libgimp2.0-dev-dbgsym_2.10.34-1+deb12u8_mipsel.deb
 1b7a8bcafadd58d165eefc494c817a6006276b94 120548 libgimp2.0-dev_2.10.34-1+deb12u8_mipsel.deb
 0e3a1479b71b011d9eaa442d65626f29b59a5343 738600 libgimp2.0_2.10.34-1+deb12u8_mipsel.deb
Checksums-Sha256:
 bf166ede7ca13b031cf232b899dfcd81a1e4c967828eec10ae85b3d23fd7faa2 15996588 gimp-dbgsym_2.10.34-1+deb12u8_mipsel.deb
 2139ed7bccb4f332947aab39788bc2afae7bdd665da02054d3cf45b6ca3ac235 20999 gimp_2.10.34-1+deb12u8_mipsel-buildd.buildinfo
 abfef17d82465722f7166c2602e1478b3af8e343bab5b933d2d33e806f9e54e0 3772268 gimp_2.10.34-1+deb12u8_mipsel.deb
 ae5f18bf8b3412aa0c09af3ad2d2cbfe97685443b4b1b28f4a0b68a316f1a4a6 1395784 libgimp2.0-dbgsym_2.10.34-1+deb12u8_mipsel.deb
 1c155a23b6197bd011a740ef1959f35b45c501f6efe25b02b4d7da2bb270bfad 17112 libgimp2.0-dev-dbgsym_2.10.34-1+deb12u8_mipsel.deb
 1ef964b4b6fe69aa8f7d26ab3522130f0ecfda9f6fef0494dd12831d8fa3e249 120548 libgimp2.0-dev_2.10.34-1+deb12u8_mipsel.deb
 4477decea56c21ea37518033a7a4ac5bc7a271ec4d05ffa80405c0c95e10818a 738600 libgimp2.0_2.10.34-1+deb12u8_mipsel.deb
Files:
 d6bed0a35633382cc0e0772237fdd536 15996588 debug optional gimp-dbgsym_2.10.34-1+deb12u8_mipsel.deb
 9ded246f0e9b6e91442bcf1ee9136083 20999 graphics optional gimp_2.10.34-1+deb12u8_mipsel-buildd.buildinfo
 d01e3560c51f0c6badea787bec94b5ab 3772268 graphics optional gimp_2.10.34-1+deb12u8_mipsel.deb
 2b0cf2298ece352fc4079f7cc84f4a7d 1395784 debug optional libgimp2.0-dbgsym_2.10.34-1+deb12u8_mipsel.deb
 371a20d56716b3ce9b6335c799fee2a4 17112 debug optional libgimp2.0-dev-dbgsym_2.10.34-1+deb12u8_mipsel.deb
 eaac13e23fe19c47725e36f8927957b3 120548 libdevel optional libgimp2.0-dev_2.10.34-1+deb12u8_mipsel.deb
 de19025f842dd41f7d757303f9a4e202 738600 libs optional libgimp2.0_2.10.34-1+deb12u8_mipsel.deb

-----BEGIN PGP SIGNATURE-----
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=La9X
-----END PGP SIGNATURE-----