225636 – security/vuxml: Document multiple vulnerabilities in GIMP

Bug 225636 - security/vuxml: Document multiple vulnerabilities in GIMP

Summary: security/vuxml: Document multiple vulnerabilities in GIMP

Status:	Closed FIXED

Alias:	None

Product:	Ports & Packages
Classification:	Unclassified
Component:	Individual Port(s) (show other bugs)
Version:	Latest
Hardware:	Any Any

Importance:	--- Affects Some People
Assignee:	Ports Security Team

URL:	https://www.securityfocus.com/bid/102...
Keywords:	patch, security

Depends on:
Blocks:

Reported:	2018-02-02 20:53 UTC by Daniel Ebdrup Jensen
Modified:	2018-07-27 12:56 UTC (History)
CC List:	2 users (show)

See Also:

Flags:	bugzilla: maintainer-feedback? (ports-secteam)

Attachments
GIMP CVE CVE-2017-17786 diff (1.19 KB, patch) 2018-02-02 20:53 UTC, Daniel Ebdrup Jensen	no flags	Details \| Diff
Corrected svn diff for vuxml.xml (1.31 KB, patch) 2018-02-02 21:48 UTC, Daniel Ebdrup Jensen	no flags	Details \| Diff
Show Obsolete (1) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Daniel Ebdrup Jensen freebsd_committer

2018-02-02 20:53:17 UTC

Created attachment 190276 [details]
GIMP CVE CVE-2017-17786 diff

The fine folks over at GNOME have identified an exploit in GNOME.

See attached diff for vuxml.vml entry.

Comment 1 VK 2018-02-02 21:42:48 UTC

Note, there are also several others in GIMP that could be added to this incident report:

* https://nvd.nist.gov/vuln/detail/CVE-2017-17784

* https://nvd.nist.gov/vuln/detail/CVE-2017-17785

* https://nvd.nist.gov/vuln/detail/CVE-2017-17786

* https://nvd.nist.gov/vuln/detail/CVE-2017-17787

* https://nvd.nist.gov/vuln/detail/CVE-2017-17788

* https://nvd.nist.gov/vuln/detail/CVE-2017-17789

Comment 2 Daniel Ebdrup Jensen freebsd_committer

2018-02-02 21:48:25 UTC

Created attachment 190280 [details]
Corrected svn diff for vuxml.xml

Comment 3 commit-hook freebsd_committer

2018-07-27 12:55:51 UTC

A commit references this bug:

Author: swills
Date: Fri Jul 27 12:55:03 UTC 2018
New revision: 475436
URL: https://svnweb.freebsd.org/changeset/ports/475436

Log:
  security/vuxml: document gimp issue

  While here, fix entry date on curl entry

  PR:		225636
  Submitted by:	D. Ebdrup <debdrup@gmail.com>

Changes:
  head/security/vuxml/vuln.xml

Comment 4 Steve Wills freebsd_committer

2018-07-27 12:56:30 UTC

Committed, thanks!