Feb 23, 2026, 8:11 PMRE: https://social.heise.de/@heiseonlineenglish/116119657532773300
Gimp users: beware of dodgy operators offering ICNS, PGM or XWD files. There is a remote code execution exploit. Patch first! #InfoSec #Gimp
- Feb 23, 2026, 8:11 PM
Replies
- Feb 23, 2026, 9:00 PM
Now that I've had some time to wake up…
ICNS: Apple Icon image format — https://en.wikipedia.org/wiki/Apple_Icon_Image_format
PGM: netpbm Portable Greymap Format — https://en.wikipedia.org/wiki/Portable_Graymap_File_Format
XWD: X Window Dump — https://en.wikipedia.org/wiki/XwdI guess XWD meets the "legacy" tag given the X window system is nearly as old as I am… `netpbm` is a rather handy command-line suite of image processing tools that is current maintained open-source software and ICNS is the current format used by Apple MacOS X for its icons.
I guess you might deal with ICNS if you're doing software development for Apple systems. PGM might come up if you've got an image processing pipeline in a shell script.
I can't think of where you'd use XWD, there are easier mechanisms for taking a screenshot that don't involve esoteric formats.