<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "http://bugs.gentoo.org/bugzilla.dtd">

<bugzilla version="2.22.7"
          urlbase="http://bugs.gentoo.org/"
          maintainer="bugzilla@gentoo.org"
>

    <bug>
          <bug_id>186657</bug_id>
          
          <creation_ts>2007-07-26 08:15 0000</creation_ts>
          <short_desc>media-gfx/gimp: 2.2.16 regression after PSD security fix</short_desc>
          <delta_ts>2007-09-08 15:31:16 0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>Gentoo Security</product>
          <component>Vulnerabilities</component>
          <version>unspecified</version>
          <rep_platform>All</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          <bug_file_loc>http://bugzilla.gnome.org/show_bug.cgi?id=456042</bug_file_loc>
          <status_whiteboard>[] jaervosz</status_whiteboard>
          
          <priority>P2</priority>
          <bug_severity>enhancement</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>falco@gentoo.org</reporter>
          <assigned_to>security@gentoo.org</assigned_to>
          <cc>hanno@gentoo.org</cc>
    
    <cc>security@gentoo.org</cc>

      

      
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2007-07-26 08:15:31 0000</bug_when>
            <thetext>Hi,

i wish to make a call for marking gimp-2.2.17 stable because of a regression introduced by the PSD fix (see security bug 182047 and GLSA 200707-09) (crash and division by zero in some PSD files, no security risk).</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2007-07-31 15:10:04 0000</bug_when>
            <thetext>ping Hanno?</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>hanno@gentoo.org</who>
            <bug_when>2007-07-31 19:03:48 0000</bug_when>
            <thetext>Arches, please stabilize.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jer@gentoo.org</who>
            <bug_when>2007-07-31 19:39:12 0000</bug_when>
            <thetext>Stable for HPPA:
   media-gfx/gimp-2.2.17</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2007-07-31 20:39:39 0000</bug_when>
            <thetext>thanks Hanno</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>gustavoz@gentoo.org</who>
            <bug_when>2007-07-31 21:37:39 0000</bug_when>
            <thetext>sparc stable.
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>armin76@gentoo.org</who>
            <bug_when>2007-08-01 13:12:03 0000</bug_when>
            <thetext>alpha/ia64/x86 stable</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>corsair@gentoo.org</who>
            <bug_when>2007-08-01 19:45:59 0000</bug_when>
            <thetext>ppc64 stable</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>dertobi123@gentoo.org</who>
            <bug_when>2007-08-01 20:42:11 0000</bug_when>
            <thetext>ppc stable</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2007-08-14 10:01:57 0000</bug_when>
            <thetext>Reassigning to security since it&apos;s a regression in a security bump.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>angelos@gentoo.org</who>
            <bug_when>2007-08-15 14:49:22 0000</bug_when>
            <thetext>amd64 stable</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>hanno@gentoo.org</who>
            <bug_when>2007-08-15 16:06:48 0000</bug_when>
            <thetext>security, wanna update the glsa? (to suggest 2.2.17 and also 2.3.19 for ~ and mips-users)</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2007-08-15 17:27:18 0000</bug_when>
            <thetext>I&apos;ll update once I return home from my extended weekend trip if noone has done it sooner.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>hanno@gentoo.org</who>
            <bug_when>2007-09-04 20:36:28 0000</bug_when>
            <thetext>security?</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2007-09-08 15:31:16 0000</bug_when>
            <thetext>Hanno sorry for the delay. After taking a closer look at it I don&apos;t think we need to update the GLSA. All users following the instructions in the GLSA should be safe security wise. Feel free to reopen if there is something I have overlooked.</thetext>
          </long_desc>
      
    </bug>

</bugzilla>