In GIMP 2.8.22, there is a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no '\0' character after the version string.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "2.8.10-0ubuntu1.2", "binary_name": "gimp" }, { "binary_version": "2.8.10-0ubuntu1.2", "binary_name": "gimp-data" }, { "binary_version": "2.8.10-0ubuntu1.2", "binary_name": "gimp-dbg" }, { "binary_version": "2.8.10-0ubuntu1.2", "binary_name": "gimp-dbgsym" }, { "binary_version": "2.8.10-0ubuntu1.2", "binary_name": "libgimp2.0" }, { "binary_version": "2.8.10-0ubuntu1.2", "binary_name": "libgimp2.0-dbgsym" }, { "binary_version": "2.8.10-0ubuntu1.2", "binary_name": "libgimp2.0-dev" }, { "binary_version": "2.8.10-0ubuntu1.2", "binary_name": "libgimp2.0-dev-dbgsym" }, { "binary_version": "2.8.10-0ubuntu1.2", "binary_name": "libgimp2.0-doc" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "2.8.22-1", "binary_name": "gimp" }, { "binary_version": "2.8.22-1", "binary_name": "gimp-data" }, { "binary_version": "2.8.22-1", "binary_name": "gimp-dbgsym" }, { "binary_version": "2.8.22-1", "binary_name": "libgimp2.0" }, { "binary_version": "2.8.22-1", "binary_name": "libgimp2.0-dbgsym" }, { "binary_version": "2.8.22-1", "binary_name": "libgimp2.0-dev" }, { "binary_version": "2.8.22-1", "binary_name": "libgimp2.0-dev-dbgsym" }, { "binary_version": "2.8.22-1", "binary_name": "libgimp2.0-doc" } ] }