==========================================================================
Ubuntu Security Notice USN-3539-1
January 22, 2018

gimp vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 14.04 LTS

Summary:

Several security issues were fixed in GIMP.

Software Description:
– gimp: The GNU Image Manipulation Program

Details:

It was discovered that GIMP incorrectly handled certain images. If a
user were tricked into opening a specially crafted image, an attacker
could possibly use this to execute arbitrary code. (CVE-2017-17784,
CVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17788,
CVE-2017-17789)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  gimp                            2.8.10-0ubuntu1.2
  libgimp2.0                      2.8.10-0ubuntu1.2

In general, a standard system update will make all the necessary
changes.

References:
  https://www.ubuntu.com/usn/usn-3539-1
  CVE-2017-17784, CVE-2017-17785, CVE-2017-17786, CVE-2017-17787,
  CVE-2017-17788, CVE-2017-17789

Package Information:
  https://launchpad.net/ubuntu/+source/gimp/2.8.10-0ubuntu1.2
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=HgHr
—–END PGP SIGNATURE—–
—