On Tuesday, July 05, 2011 09:39:39 am Baughman, Richard P USA CIV (US) wrote:

Good morning,

Have a customer requesting GIMP 2.6.x for project

starting within 2 weeks.

IT department requires the software to be tested and

approved prior to any

new software being installed within our Enterprise.

Basically I understand GIMP to operate at the desktop... It is an application that receives services from the OS

? what system ports (if any) are utilized by GIMP ? does the program traverse internet (80, 8080, 443 etc ) ? are there any known vulnerabilities

Appreciate your time and assistance.

Thanks Rick

_______________________________________________ Gimp-user mailing list
Gimp-user@lists.XCF.Berkeley.EDU
https://lists.XCF.Berkeley.EDU/mailman/listinfo/gimp-user

Gimp is an Open Source program that runs on MSWin, OS X and Linux. It is similar in purpose to Photoshop but does not produce CMYK output, just RGB.

To install Gimp you download it over the Internet. Please visit http://www.gimp.org for details.

The user can click on the help facility and view the Gimp Manual in an html viewer. Other than that there is no operational connection to the internet. No ports are opened. It is a stand-alone local program.

Gimp has been in use for many years on many systems in many shops. It is not scary.

I know of no vulnarabilities. But I operate on Linux where vulnerabilities are seldom an issue.

On Tue, Jul 5, 2011 at 9:49 AM, John Culleton wrote:

The user can click on the help facility and view the Gimp Manual in an html viewer. Other than that there is no operational connection to the internet.

That's not entirely true: the user can select 'File->Open Location' and enter/paste a URI, which is then downloaded and opened in GIMP.

Of course GIMP does not open or listen to any ports on the local machine.

Chris

On 05.07.2011 23:26, Chris Mohler wrote:

Of course GIMP does not open or listen to any ports on the local machine.

Unless you start the Script-Fu server.

Regards, Michael