Hi, we are releasing GIMP 2.8.18 with a number of bug fixes, including the fix for a vulnerability found in the XCF loading code: CVE-2016-4994 Use-after-free vulnerability in the xcf_load_image function https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4994 This is a bugfix release in the stable 2.8 series, no new features were added. For a complete list of changes since 2.8.16 please see the "Changes" section below. Also see the release notes of the 2.8 series at https://www.gimp.org/release-notes/gimp-2.8.html Happy GIMPing, --Michael Download ======== GIMP 2.8.18 is available from: https://download.gimp.org/pub/gimp/v2.8/ and from the mirrors listed at: https://www.gimp.org/downloads/#mirrors Please use the torrent, it distributes the download bandwidth across all mirrors: https://download.gimp.org/pub/gimp/v2.8/gimp-2.8.18.tar.bz2.torrent The checksum of the tarball is: 5adaa11a68bc8a42bb2c778fee4d389c gimp-2.8.18.tar.bz2 Overview of Changes from GIMP 2.8.16 to GIMP 2.8.18 =================================================== Core: - Initialize fontconfig cache in separate thread to keep GUI responsive on first startup - Properly recognize layer masks as deactivated, e.g. for moving layers - Create $XDG_DATA_HOME if it doesn't exist - (CVE-2016-4994) Multiple Use-After-Free when parsing XCF channel and layer properties - Fix progress access to prevent crash on rapid sequence of commands - Fix crash in gimp-gradient-segment-range-move GUI: - Disable color picker buttons on OS X to prevent a GUI lockup - Disable "new-style" full-screen mode on OS X to prevent a crash - Pulsing progress bar in splash screen to indicate unknown durations - Fix gamut warning color for lcms display filter - Fix unbolding of bold font on edit - Prevent accidental renaming of wrong adjacent item Installer: - Change compression settings to decrease size by 20% - Add Catalan, Danish, French, Dutch Plug-ins: - Fix crash on sRGB JPEG image drag & drop - Fix ambiguous octal-escaped output of c-source - Fix KISS CEL export - Fix progress bar for file-compressor - Make Script-Fu regex match return proper character indexes for Unicode characters - Fix Script-Fu modulo for large numbers General: - Documentation updates - Bug fixes - Translation updates Contributors ============ Adrian Likins, Ell, Jehan, Jernej Simončič, João S. O. Bueno, Kristian Rietveld, Massimo Valentini, Michael Natterer, Michael Schumacher, Pedro Gimeno, Shmuel H, Simon Budig, Sven Claussner, Thomas Manni Translators =========== Alexandre Prokoudine, Anders Jonsson, Ask Hjorth Larsen, Balázs Úr, Baurzhan Muftakhidinov, Christian Kirbach, Cédric Valmary, Dimitris Spingos, Dimitris Spingos (Δημήτρης Σπίγγος), Dušan Kazik, Gábor Kelemen, Marco Ciampa, Mario Blättermann, Martin Srebotnjak, Piotr Drąg, Rafael Fontenelle, Sveinn í Felli, Tiago Santos, Милош Поповић, -- Regards, Michael GPG: 96A8 B38A 728A 577D 724D 60E5 F855 53EC B36D 4CDD
Attachment:
signature.asc
Description: OpenPGP digital signature