{"id":"SUSE-SU-2017:3062-1","aliases":[],"status":"published","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\n- Don't build gimp with webkit1 support, as it is no longer maintained and has\n  plenty of security bugs. \n\n  This disables the GIMP's built-in help browser; it will use an external browser when configured this way.\n\n  This works around a number of security vulnerabilities in Webkit1.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-11-23T16:16:14Z","modified":"2017-11-23T16:16:14Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"gimp","fixed_in":["2.8.18-9.3.26"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"gimp","fixed_in":["2.8.18-9.3.26"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"gimp","fixed_in":["2.8.18-9.3.26"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"gimp","fixed_in":["2.8.18-9.3.26"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"gimp","fixed_in":["2.8.18-9.3.26"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"gimp","fixed_in":["2.8.18-9.3.26"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-9.3.26"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-9.3.26"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-9.3.26"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-9.3.26"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-9.3.26"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-9.3.26"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173062-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1050469","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2017:3062-1","title":"Security update for gimp","description":"\n  \nThis update for gimp fixes the following issues:\n\n- Don't build gimp with webkit1 support, as it is no longer maintained and has\n  plenty of security bugs. \n\n  This disables the GIMP's built-in help browser; it will use an external browser when configured this way.\n\n  This works around a number of security vulnerabilities in Webkit1.\n","status":"published","published":"2017-11-23T16:16:14Z","modified":"2017-11-23T16:16:14Z","updated_at":"2026-11-02T15:53:44.209561Z"}]}}