DEBIAN-CVE-2018-12713

GIMP through 2.10.2 makes ggettmpdir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimpwriteandreadfile function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was...

PT-2018-11348

Name of the Vulnerable Software and Affected Versions GIMP versions 2.10.2 and earlier Description The issue arises from the use of g get tmp dir calls to establish temporary filenames, which may result in a filename that already exists. This is demonstrated by the gimp write and read file functi...