Jacob Boerema d9d0f5b4e6 plug-ins: Fix #15732 PSP File Parsing Integer Overflow... ... Leading to Heap Corruption An integer overflow vulnerability has been identified in the PSP (Paint Shop Pro) file parser of GIMP. The issue occurs in the read_creator_block() function, where the Creator metadata block is processed. Specifically, a 32-bit length value read from the file is used directly for memory allocation without proper validation. Trigger -> when length is set to 0xFFFFFFFF To fix this, we check that using that length doesn't exceed the end of the creator block. If it does, we return with an error message.		2026-01-23 11:35:56 -05:00
..
common	plug-ins: Fix #15732 PSP File Parsing Integer Overflow...	2026-01-23 11:35:56 -05:00
file-bmp	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
file-dds	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
file-exr	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
file-faxg3	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
file-fits	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
file-fli	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
file-icns	plug-ins: Resolve ZDI-CAN-28530 for ICNS load	2026-01-18 17:17:31 +00:00
file-ico	plug-ins: Add overflow checks for ICO loading	2026-01-12 12:17:00 +00:00
file-jpeg	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
file-psd	plug-ins: fix incorrect psd dropshadow offsets	2026-01-12 09:14:16 -05:00
file-raw	plugins: Make file-raw-utils.c use proper macOS 10.10+ API	2026-01-11 14:56:16 -03:00
file-sgi	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
file-tiff	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
file-webp	plug-ins: Don't translate "ms" for WEBP animation	2026-01-07 20:09:21 +00:00
filter-browser	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
flame	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
fractal-explorer	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
gfig	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
gimpressionist	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
gradient-flare	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
help	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
help-browser	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
ifs-compose	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
imagemap	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
lighting	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
map-object	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
metadata	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
pagecurl	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
print	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
python	plug-ins: Fix .py plugins on non-relocatable macOS builds	2026-01-15 18:39:32 -03:00
screenshot	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
script-fu	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
selection-to-path	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
twain	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
generate_mime_ext.py	build/macos, plug-ins: Generate file associations for macOS automatically	2026-01-17 18:13:23 -03:00
meson.build	build/macos, plug-ins: Generate file associations for macOS automatically	2026-01-17 18:13:23 -03:00