CVE-2023-44444

Name	CVE-2023-44444
Description	GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-3659-1, DSA-5564-1, ELA-1005-1
Debian Bugs	1055984

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
gimp (PTS)	jessie, jessie (lts)	2.8.14-1+deb8u2	vulnerable
	stretch (security)	2.8.18-1+deb9u1	vulnerable
	stretch (lts), stretch	2.8.18-1+deb9u2	fixed
	buster	2.10.8-2	vulnerable
	buster (security)	2.10.8-2+deb10u1	fixed
	bullseye	2.10.22-4+deb11u2	fixed
	bullseye (security)	2.10.22-4+deb11u1	fixed
	bookworm	2.10.34-1+deb12u2	fixed
	bookworm (security)	2.10.34-1+deb12u1	fixed
	trixie	2.10.36-2	fixed
	sid	2.10.36-3	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
gimp	source	jessie	(unfixed)	end-of-life
gimp	source	stretch	2.8.18-1+deb9u2		ELA-1005-1
gimp	source	buster	2.10.8-2+deb10u1		DLA-3659-1
gimp	source	bullseye	2.10.22-4+deb11u1		DSA-5564-1
gimp	source	bookworm	2.10.34-1+deb12u1		DSA-5564-1
gimp	source	(unstable)	2.10.36-1			1055984

Notes

https://www.zerodayinitiative.com/advisories/ZDI-23-1591/
https://www.gimp.org/news/2023/11/07/gimp-2-10-36-released/#fixed-vulnerabilities
https://gitlab.gnome.org/GNOME/gimp/-/commit/e1bfd87195e4fe60a92df70cde65464d032dd3c1
Backport to gimp-2.10: https://gitlab.gnome.org/GNOME/gimp/-/commit/ef12c0a90752a06d4c465a768d052b07f5e8a8a0 (GIMP_2_10_36)
https://gitlab.gnome.org/GNOME/gimp/-/issues/10071 (restricted)