Hi,

a new GIMP 2.2 release has been uploaded to ftp://ftp.gimp.org/pub/gimp/v2.2/

GIMP 2.2.16 is a bug-fix release in the stable GIMP 2.2 series. It fixes security problems in some file load plug-ins and improves robustness and forward compatibility of the XCF loader. In particular the following issues have been addressed:

- improved input value validation in several file plug-ins (bug #453973) - improved handling of corrupt or invalid XCF files - guard against integer overflows in several file plug-ins (bug #451379) - fixed handling of background alpha channel in XCF files (bug #443097) - improved forward compatibility of the config parser - fixed crash when previewing some animated brushes (bug #446005)

As usual, we only release source code. But for some of the various supported platforms binary packages are already available. Others should follow soon.

Sven

Hi,

I would like to say special thanks to Mukund and Raphaël who both helped during the last week to fix the reported and some unreported security problems in our file load plug-ins. Without your help we wouldn't have been able to respond to the vulnerability report so quickly.

Sven

Hi,

due to a regression in the PSD loader that was introduced with the 2.2.16 release, we had to roll out another release in the stable 2.2 series. The source code for GIMP 2.2.17 has been uploaded to

ftp://ftp.gimp.org/pub/gimp/v2.2/

The following issues have been addressed with this release:

- fixed regression in PSD load plug-in (bug #456042) - fixed crash when loading a corrupt PSD file (bug #327444) - work around for Pango appending " Not-Rotated" to font names

Sven