FSA/FC5/FEDORA-2007-491

[SECURITY] Fedora Core 5 Update: gimp-2.2.14-5.fc5

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-491
2007-05-07
---------------------------------------------------------------------

Product     : Fedora Core 5
Name        : gimp
Version     : 2.2.14
Release     : 5.fc5
Summary     : GNU Image Manipulation Program
Description :
GIMP (GNU Image Manipulation Program) is a powerful image composition and
editing program, which can be extremely useful for creating logos and other
graphics for webpages. GIMP has many of the tools and filters you would expect
to find in similar commercial offerings, and some interesting extras as well.
GIMP provides a large image manipulation toolbox, including channel operations
and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all
with multi-level undo.

---------------------------------------------------------------------
Update Information:

The GIMP package in Fedora includes a helper script
/usr/sbin/gimp-plugin-mgr for plugins contained in other
packages, for example, xsane-gimp. This script manages
symlinks from the GIMP plugin directory (which may change
between upgrades) to the actual location of the plugins.

A bug has been fixed in this erratum of GIMP that was in all
older GIMP packages. The bug concerns the execution order in
which the symlinks are installed and removed, causing the
symlinks to vanish when the GIMP package is updated.

Although this GIMP erratum has the execution order fixed,
due to the nature of the problem it will show up once more
when updating from an affected version to a fixed version.
To add these symlinks back in, run this command, providing
the root password when prompted:

su -c "/usr/sbin/gimp-plugin-mgr --install '*'"
---------------------------------------------------------------------
* Tue May  1 2007 Nils Philippsen <nphilipp redhat com> - 2:2.2.14-5
- don't let gimp-plugin-mgr --uninstall fail %pre/%preun scriptlets (#238337)
* Mon Apr 30 2007 Nils Philippsen <nphilipp redhat com> - 2:2.2.14-4
- fix plugin symlinks handling better (#238337)
* Mon Apr 30 2007 Nils Philippsen <nphilipp redhat com> - 2:2.2.14-3
- don't erroneously delete symlinks to external plugins when updating (#238337)
* Mon Apr 30 2007 Nils Philippsen <nphilipp redhat com> - 2:2.2.14-2
- avoid buffer overflow in sunras plugin (#238422)
* Tue Apr 24 2007 Nils Philippsen <nphilipp redhat com> - 2:2.2.14-1
- version 2.2.14

Bugs fixed in GIMP 2.2.14
=========================

- avoid crashing on newer versions of the winicon format (bug #352899)
- fixed crash in Postscript plug-in (bug #353381)
- fixed handling of TABs in the text tool (bug #353132)
- fixed bug in Depth Merge plug-in (bug #355219)
- fixed bug in GimpDrawablePreview widget (bug #353639)
- fixed bug in Line Nove script (bug #357433)
- fixed bug in Ripple plug-in (bug #357431)
- save locale independent files from Fractal Explorer plug-in (bug #360095)
- fixed bug in Super Nova plug-in (bug #340073)
- be more robust against broken XCF files (bug #357809)
- fixed drawing issues in Image Map plug-in (bug #311621)
- fixed smoothing option in Fractal Explorer plug-in (bug #372671)
- load channels in the proper order when opening an XCF file (bug #378003)
- deal with floating selections in the Burn-In Animation script (bug #384096)
- fixed clipping in the GimpPreviewArea widget (bug #392692)
- fixed a potential crash in gimp-remote (bug #392111)
- work around a file-chooser problem on Windows (bug #398726)
- fixed markup of the gimp(1) manual page (bug #401145)
- fixed the fix for the right-to-left layout in layers dialog (bug #348347)
- fixed PSD save plug-in on 64bit architectures (bug #335130)
- added missing dependency in gimpui-2.0.pc file (bug #356394)
- fixed a crash in the PSD save plug-in (bug #395385)
- improved robustness of transform tool preview code (bug #420595)
- improved forward compatibility of XCF loader (bug #316207)
- don't crash in the Compressor plug-in if files can't be opened (bug #422444)
- fixed sensitivity of input fields in the Lighting plug-in (bug #359833)

- don't BuildRequire gimp-print/gutenprint anymore
* Mon Mar 26 2007 Nils Philippsen <nphilipp redhat com> - 2:2.2.13-3
- use gutenprint per default for current development/future distribution
versions (Fedora >= 7, RHEL >= 6)
* Mon Mar 26 2007 Nils Philippsen <nphilipp redhat com> - 2:2.2.13-2
- own used directories in gimp-devel (#233794)
* Wed Feb 21 2007 Nils Philippsen <nphilipp redhat com>
- s/%redhat/%rhel/g
* Wed Feb  7 2007 Nils Philippsen <nphilipp redhat com>
- really change defaults for use of modular X and lcms (#224156)
* Thu Feb  1 2007 Nils Philippsen <nphilipp redhat com>
- change defaults for use of modular X and lcms (#224156)
* Fri Aug 25 2006 Nils Philippsen <nphilipp redhat com> - 2:2.2.13-1
- version 2.2.13
- remove obsolete filename patch
* Thu Aug 17 2006 Nils Philippsen <nphilipp redhat com> - 2:2.2.12-5
- don't barf on empty /etc/gimp/plugins.d (#202808)
* Wed Aug 16 2006 Nils Philippsen <nphilipp redhat com> - 2:2.2.12-4
- revamp scheme for integrating external plugins (#202545)
* Wed Aug  2 2006 Nils Philippsen <nphilipp redhat com> - 2:2.2.12-3
- allow spaces in filenames when saving (#200888, patch by Michael Natterer)
* Tue Jul 18 2006 Nils Philippsen <nphilipp redhat com> - 2:2.2.12-2
- split off libraries into gimp-libs to allow multilib installations
- remove pre-release cruft
* Wed Jul 12 2006 Jesse Keating <jkeating redhat com> - 2:2.2.12-1.1
- rebuild
* Mon Jul 10 2006 Nils Philippsen <nphilipp redhat com> - 2:2.2.12-1
- version 2.2.12
- use %dist/%fedora/%redhat
- remove obsolete gcc4, libpng patches
- show build options in %prep
- require gettext for building
* Wed May 31 2006 Nils Philippsen <nphilipp redhat com> - 2:2.2.11-5
- cope with pygobject2/-devel being split off (#193368)
* Tue May  9 2006 Nils Philippsen <nphilipp redhat com> - 2:2.2.11-4
- don't use long deprecated libpng API (#191027, patch by Manish Singh)

---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/

729ed6a6ac211cd2b36cac0e0c545ed204d45487  SRPMS/gimp-2.2.14-5.fc5.src.rpm
729ed6a6ac211cd2b36cac0e0c545ed204d45487  noarch/gimp-2.2.14-5.fc5.src.rpm
c04e4b7b81019594fefc39ce008e8b372f87683c  ppc/gimp-2.2.14-5.fc5.ppc.rpm
3a0d3944f284766c705deba6260b72b2fc5e77e2  ppc/gimp-devel-2.2.14-5.fc5.ppc.rpm
01add798f95e1fa3b2aaf2f9b08b628479c9e53e  ppc/gimp-libs-2.2.14-5.fc5.ppc.rpm
573b314dfcb14366113db088bddeb0257f49e03c  ppc/debug/gimp-debuginfo-2.2.14-5.fc5.ppc.rpm
fc3683a68d956306b02e980e1077769c6c7f1c12  x86_64/gimp-libs-2.2.14-5.fc5.x86_64.rpm
1a48f756d5efb530fbe85af52819db36680b2500  x86_64/debug/gimp-debuginfo-2.2.14-5.fc5.x86_64.rpm
5a542a0a58d94024b07cdeeb9e60777c77c63e97  x86_64/gimp-devel-2.2.14-5.fc5.x86_64.rpm
30fe0315f86289dee30396c7b20f7cec4edb0cf3  x86_64/gimp-2.2.14-5.fc5.x86_64.rpm
82ee257bc06c853e8b3b2921150cd6868895aa21  i386/gimp-devel-2.2.14-5.fc5.i386.rpm
2f6a6e65876342113f8358ed0966634052c2bc0f  i386/gimp-libs-2.2.14-5.fc5.i386.rpm
5588880e828c5d4f8c3ea067a827a5dce12a1a55  i386/debug/gimp-debuginfo-2.2.14-5.fc5.i386.rpm
c0df533b9d4e03b6a12235ac673c44b516f23eed  i386/gimp-2.2.14-5.fc5.i386.rpm

This update can be installed with the 'yum' update program.  Use 'yum update
package-name' at the command line.  For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------