Update submodules from pool/gimp#4 and create patchinfo.20260121084821180176.93181000773252/_patchinfo

2026-01-21 09:50:36 +01:00
5 changed files with 25 additions and 18 deletions
--- a/.gitmodules
+++ b/.gitmodules
@@ -26242,7 +26242,3 @@
 	path = openQA-devel-container
 	url =  ../../pool/openQA-devel-container
 	branch = leap-16.0
-[submodule "doomsday"]
-	path = doomsday
-	url = ../../pool/doomsday
-	branch = leap-16.0
--- a/1
+++ b/1
--- a/2
+++ b/2
--- a/patchinfo.20260121084821180176.93181000773252/_patchinfo
+++ b/patchinfo.20260121084821180176.93181000773252/_patchinfo
@@ -0,0 +1,24 @@
+<patchinfo>
+  <issue tracker="cve" id="2025-14422"/>
+  <issue tracker="cve" id="2025-14423"/>
+  <issue tracker="bnc" id="1255293">VUL-0: CVE-2025-14422: gimp: PNM File Parsing Integer Overflow Remote Code Execution Vulnerability</issue>
+  <issue tracker="bnc" id="1255296">VUL-0: CVE-2025-14425: gimp: JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability</issue>
+  <issue tracker="cve" id="2025-14425"/>
+  <issue tracker="bnc" id="1255295">VUL-0: CVE-2025-14424: gimp: XCF File Parsing Use-After-Free Remote Code Execution Vulnerability</issue>
+  <issue tracker="bnc" id="1255294">VUL-0: CVE-2025-14423: gimp: LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability</issue>
+  <issue tracker="cve" id="2025-14424"/>
+  <packager>mgorse</packager>
+  <rating>important</rating>
+  <category>security</category>
+  <summary>Security update for gimp</summary>
+  <description>This update for gimp fixes the following issues:
+
+Changes in gimp:
+
+- CVE-2025-14422: Fixed PNM File Parsing Integer Overflow (bsc#1255293)
+- CVE-2025-14423: Fixed LBM File Parsing Stack-based Buffer Overflow (bsc#1255294)
+- CVE-2025-14424: Fixed XCF File Parsing Use-After-Free (bsc#1255295)
+- CVE-2025-14425: Fixed JP2 File Parsing Heap-based Buffer Overflow(bsc#1255296)
+</description>
+  <package>gimp</package>
+</patchinfo>
--- a/patchinfo.20260126195507763486.93181000773252/_patchinfo
+++ b/patchinfo.20260126195507763486.93181000773252/_patchinfo
@@ -1,12 +0,0 @@
-<patchinfo>
-  <packager>eroca</packager>
-  <rating>moderate</rating>
-  <category>recommended</category>
-  <summary>Recommended update for doomsday</summary>
-  <description>This update for doomsday fixes the following issues:
-
-Introduces doomsday.
-
-</description>
-  <package>doomsday</package>
-</patchinfo>