No description
Find a file
Gabriele Barbero 691785113a plug-ins: validate fcTL frame dimensions...
...against IHDR bounds in APNG loader

The pixel buffer is allocated using base image dimensions from the IHDR
chunk, but row write offsets were computed using the per-frame dimensions
from the fcTL chunk with no bounds check. A crafted APNG file with
fcTL.width > IHDR.width or fcTL.height > IHDR.height would cause
out-of-bounds writes into the heap on every row after row 0.

Reject fcTL frames whose dimensions or offsets extend beyond the base
image dimensions before proceeding with decoding.
2026-04-08 11:47:05 +02:00
.gitlab .gitlab: Update security template 2026-02-25 11:46:26 -03:00
.vscode Add .vscode/settings.json compliant with Coding Style 2024-01-19 16:06:06 -03:00
app app, pdb: (gimp-quit) PDB procedure is also deprecated. 2026-04-07 20:13:31 +02:00
app-tools app, app-tools, libgimp: Use freopen_s on Windows to fix CRT_INSECURE_DEPRECATE 2026-03-31 13:31:33 -03:00
build build/macos: Update background path for local .dmg creation (not used) 2026-04-06 21:49:00 -03:00
data app, build, plug-ins: Run interpreters conditionally on Windows console 2025-11-09 15:56:32 -03:00
desktop desktop: prepare GIMP 3.2.4 metadata. 2026-04-08 10:38:33 +02:00
devel-docs devel-docs: List build/macos/Info.plist on os-support 2026-03-21 21:44:36 -03:00
docs docs, tools: generate Mardown versions of the man pages directly… 2026-03-30 11:34:25 +02:00
etc app, etc: fix presets typo in blurb 2026-03-29 01:03:59 +01:00
extensions build, extensions, plug-ins: Add support to MSVC's resource compiler too 2025-11-29 18:18:57 -03:00
gimp-data@3379d4a947 gimp-data: bump (fixing RC text shown on git builds). 2026-04-07 21:54:55 +02:00
libgimp libgimp: gimp_quit() is now deprecated. 2026-04-07 20:08:48 +02:00
libgimpbase libgimpbase: add and improve some docs. 2026-04-06 17:56:32 +02:00
libgimpcolor libgimpcolor: small indentation fix. 2026-03-11 21:05:39 +01:00
libgimpconfig libgimpconfig: Use strcat_s on Windows to fix CRT_INSECURE_DEPRECATE warns 2026-04-01 07:16:40 -03:00
libgimpmath Revert "libgimpmath: #pragma once" 2025-08-14 00:54:50 +02:00
libgimpmodule Declare gexiv2 dependency on many targets (due to gimpmetadata.h) 2025-10-03 18:31:53 -03:00
libgimpthumb app, libgimp*, plug-ins: Use strncpy_s on Windows to fix CRT_INSECURE_DEPRECATE 2026-03-31 13:31:33 -03:00
libgimpwidgets libgimpwidgets: Use gdk_pixbuf_get_pixels on older gdk_pixbuf 2026-04-01 08:42:48 -03:00
menus tools: implement restore option for on-canvas text editor ... 2025-10-31 15:39:10 +01:00
modules app, libgimp*, modules: More type <> casting fixes 2026-03-31 16:27:25 -03:00
pdb app, pdb: (gimp-quit) PDB procedure is also deprecated. 2026-04-07 20:13:31 +02:00
plug-ins plug-ins: validate fcTL frame dimensions... 2026-04-08 11:47:05 +02:00
po Update Cornish translation 2026-04-07 09:20:20 +00:00
po-libgimp Update Swedish translation 2026-03-24 20:21:18 +00:00
po-plug-ins Update Turkish translation 2026-04-01 21:27:12 +00:00
po-python Update Serbian translation 2026-03-18 20:29:53 +00:00
po-script-fu Update Czech translation 2026-04-01 20:13:33 +00:00
po-tags Add Kazakh translation 2026-03-04 01:43:31 +00:00
po-tips Update Serbian translation 2026-03-18 20:56:33 +00:00
po-windows-installer Update Brazilian Portuguese translation 2026-04-04 13:37:33 +00:00
themes themes: Define GimpColorSelect button margin 2026-03-18 02:15:46 +00:00
tools tools: Support alternative iso_639-3 domain 2026-04-06 21:33:33 -03:00
.clang-format clang-format: uncomment rule not usable yet. 2025-04-30 23:36:15 +02:00
.dir-locals.el
.gitlab-ci.yml gitlab-ci: Add cppcheck to issue-bot needs: 2026-04-06 20:19:53 -03:00
.gitmodules .gitmodules: Specify gimp-data branch as 'main' 2025-10-06 13:49:22 -03:00
.kateconfig
AUTHORS AUTHORS: regenerated. 2026-03-03 18:27:32 +01:00
authors.dtd
authors.xml authors: update list. 2025-12-16 12:42:16 +01:00
authors.xsl
authors4gimp-web.xsl authors4gimp-web: "artist" section clearly also contains splash artists. 2025-12-16 12:43:28 +01:00
ChangeLog.pre-1-0
ChangeLog.pre-1-2
ChangeLog.pre-2-0
ChangeLog.pre-2-2
ChangeLog.pre-2-4
ChangeLog.pre-2-6
ChangeLog.pre-git
COPYING
gimp.doap DOAP: Replace defunct mailing list 2023-12-13 10:16:27 +03:00
INSTALL.in Revert "INSTALL: Fix alignment of optional dependencies table" 2026-04-06 17:47:04 +02:00
LICENSE LICENSE: add a note about data/ licensing for future added data. 2023-03-16 23:20:44 +01:00
MAINTAINERS MAINTAINERS: update. 2021-04-04 16:01:48 +02:00
meson.build Revert "meson: Bump python3_minver to 3.10" 2026-04-08 06:05:04 -03:00
meson_dist_script.py meson: Port meson_dist_script.sh to Python 2025-04-17 11:18:30 -03:00
meson_options.txt meson, app: Remove Wintel emulation layer after TWAIN disabling 2026-03-17 09:56:20 -03:00
NEWS NEWS: update. 2026-04-08 11:29:26 +02:00
NEWS.pre-2-0 Misc. typos 2018-10-19 15:30:27 +00:00
NEWS.pre-2-2 Misc. typos 2018-10-19 15:30:27 +00:00
NEWS.pre-2-4 Misc. typos 2018-10-19 15:30:27 +00:00
NEWS.pre-2-6 Misc. typos 2018-10-19 15:30:27 +00:00
NEWS.pre-2-8
NEWS.pre-2-10 Misc. typos 2018-10-19 15:30:27 +00:00
NEWS.pre-3-0 NEWS: move to NEWS.pre-3-0 and prepare for the new stable series. 2025-03-17 23:43:19 +01:00
NEWS.pre-3-2 NEWS: switch to the 3.2 stable branch and archive the older NEWS file. 2026-03-17 18:18:04 +01:00
README README: update, preparing for the 3.2 release. 2026-03-03 16:56:49 +01:00
README.i18n desktop: change gimp20 to gimp30 for gettext 2024-08-29 09:09:29 +00:00

                   ------------------------------
                   GNU Image Manipulation Program
                         3.2 Stable Branch
                   ------------------------------

This is a stable release in the GIMP 3.2 series.

If you think you found a bug in this version, please make sure that it
hasn't been reported earlier and report it!

If you want to hack on GIMP, please read the file devel-docs/README.md.
For detailed installation instructions, see the file INSTALL.


1. Web Resources
================

GIMP's home page is at:

	https://www.gimp.org/

Please be sure to visit this site for information, documentation,
tutorials, news, etc. All things GIMP-ish are available from there.

The latest version of GIMP can be found at:

	https://www.gimp.org/downloads/

We also have a website dedicated to documentation at:

        https://docs.gimp.org/


2. Contributing
===============

GIMP source code can be found at:

	https://gitlab.gnome.org/GNOME/gimp/

Resources for contributors:

        https://developer.gimp.org/

In particular, you may want to look in the "Core Development" section. Some
articles of particular interest for newcomers could be:

* Setting up your developer environment: https://developer.gimp.org/core/setup/
* GIMP Coding Style: https://developer.gimp.org/core/coding_style/
* Submit your first patch: https://developer.gimp.org/core/submit-patch/


3. Discussion Channels
======================

We have several discussion channels dedicated to GIMP user and
development discussion. There is more info at:

        https://www.gimp.org/discuss.html

For the real junkies, there are IRC channels (e.g. #gimp or #gimp-user)
devoted to GIMP on GIMPNet (a private free software oriented network).
Many of the developers hang out there. Some of the GIMPNet servers are:

	irc.gimp.org:6667
	irc.us.gimp.org:6667
	irc.eu.gimp.org:6667

More discussion channels, such as forums, will be listed on the above
"discuss" page when they are moderated by a team member.
Links to archives of former discussion methods (e.g. mailing lists) are
also included in that page.

4. Customizing
==============

The look of GIMP's interface can be customized like any other GTK app
by editing files in `${XDG_CONFIG_HOME}/gtk-3.0/` (settings.ini and
gtk.css in particular) or by using "themes" (ready-made customizations).
Additionally, GIMP reads `${XDG_CONFIG_HOME}/GIMP/3.2/gimp.css` so you
can have settings that only apply to GIMP.

You can also manually change the keybindings to any of your choice by
editing: `${XDG_CONFIG_HOME}/GIMP/3.2/shortcutsrc`.


Have fun,

  Spencer Kimball
  Peter Mattis
  Federico Mena
  Manish Singh
  Sven Neumann
  Michael Natterer
  Dave Neary
  Martin Nordholts
  Jehan
  Aryeom