I am currently working on a photo project, thanks to a GIMP update the
other day, it no longer loads, and am fucked as I can't work!

Mageia 8, x86_64.

GEGL version too old!

GIMP requires GEGL version 0.4.38 or later.

Installed GEGL version is 0.4.36.

Somehow you or your software packager managed

to install GIMP with an older GEGL version.

Please upgrade to GEGL version 0.4.38 or later.

On 15/12/2023 22:41, Ar wrote:

Tried a downgrade GIMP to the previous version, but the package manger
won't let me.

There is no "GEGL 0.4.36" listed in the package manager.

On 2023-12-15, Ar <Ar@127.0.0.1> wrote:
> I am currently working on a photo project, thanks to a GIMP update the
> other day, it no longer loads, and am fucked as I can't work!
>
> Mageia 8, x86_64.
>
>
> GEGL version too old!
>
>
>
> GIMP requires GEGL version 0.4.38 or later.
>
> Installed GEGL version is 0.4.36.
>

urpmi --downgrade gimp
Installs the second newest version of gimp (2.10.32)

Note that you do not tell us what this nesest version of gimp is that
you installed. You might have got it before the newest version of
libgegl got uploaded to the mirror.i Mind you Mga8 is no longer being
updated so that is unlikely

Or Mageia made a mistake (go to the bugs.mageia.org and tell them)

The newest version of libgegl on the 8 mirror is lib64gegl0.4_0-0.4.36-1.mga8.x86_64.rpm

>
>
> Somehow you or your software packager managed
>
> to install GIMP with an older GEGL version.
>
>
>
Please upgrade to GEGL version 0.4.38 or later.

On Fri, 15 Dec 2023 22:41:02 +0000, Ar wrote:

> I am currently working on a photo project, thanks to a GIMP update the
> other day, it no longer loads, and am fucked as I can't work!
>
> Mageia 8, x86_64.
>
>
> GEGL version too old!
>
>
>
> GIMP requires GEGL version 0.4.38 or later.
>
> Installed GEGL version is 0.4.36.
>
>
>
> Somehow you or your software packager managed
>
> to install GIMP with an older GEGL version.
>
>
>
> Please upgrade to GEGL version 0.4.38 or later.

A search of the 'Net brings up a hit in
https://mageia.pkgs.org › 8 › mageia-core-updates-testing-x86_64

lib64gegl0.4_0-0.4.38-1.mga8.x86_64.rpm

Other than that, Mageia seems to be at 0.4.34 unless you
upgrade to Mga9. Perhaps enable testing and use mcc to see
if you can find the package(s) you need.

Bear in mind, urpmi has --downgrade and --replacepkgs options.
You have to download the rpm(s) first and then it uses rpm
to do the deed.

Cheers!

jim

--
UNIX is not user-unfriendly, it merely
expects users to be computer friendly.

On 2023-12-16, David W. Hodgins <dwhodgins@nomail.afraid.org> wrote:
> On Sat, 16 Dec 2023 10:12:40 -0500, Jim <jim.beard@verizon.net> wrote:
>
>> On Fri, 15 Dec 2023 22:41:02 +0000, Ar wrote:
>>
>>> I am currently working on a photo project, thanks to a GIMP update the
>>> other day, it no longer loads, and am fucked as I can't work!
>>>
>>> Mageia 8, x86_64.
>>>
>>>
>>> GEGL version too old!
>>>
>>>
>>>
>>> GIMP requires GEGL version 0.4.38 or later.
>>>
>>> Installed GEGL version is 0.4.36.
>>>
>>>
>>>
>>> Somehow you or your software packager managed
>>>
>>> to install GIMP with an older GEGL version.
>>>
>>>
>>>
>>> Please upgrade to GEGL version 0.4.38 or later.
>>
>> A search of the 'Net brings up a hit in
>> https://mageia.pkgs.org › 8 › mageia-core-updates-testing-x86_64
>>
>> lib64gegl0.4_0-0.4.38-1.mga8.x86_64.rpm
>>
>> Other than that, Mageia seems to be at 0.4.34 unless you
>> upgrade to Mga9. Perhaps enable testing and use mcc to see
>> if you can find the package(s) you need.
>>
>> Bear in mind, urpmi has --downgrade and --replacepkgs options.
>> You have to download the rpm(s) first and then it uses rpm
>> to do the deed.
>>
>> Cheers!
>
> 4.38 can be downloaded from
> http://mirror.math.princeton.edu/pub/mageia/distrib/8/SRPMS/core/updates_testing/gegl-0.4.38-1.mga8.src.rpm
>

Or
http://mirror.math.princeton.edu/pub/mageia/distrib/8/x86_64/media/core/updates_testing/
and get
gegl-0.4.38-1.mga8.x86_64.rpm
lib64gegl-devel-0.4.38-1.mga8.x86_64.rpm
and install them. without having to compile the source.

But I do agree, releasing a new version of gimp without at the same time
releasing new versions of libraries that gimp depends on is not good.
And libgegl has been stuck in testing now for 3 weeks.
If it is not ready for release then gimp shold not have been released.

> Regards, Dave Hodgins

On 2023-12-16, David W. Hodgins <dwhodgins@nomail.afraid.org> wrote:
> On Sat, 16 Dec 2023 10:12:40 -0500, Jim <jim.beard@verizon.net> wrote:
>
>> On Fri, 15 Dec 2023 22:41:02 +0000, Ar wrote:
>>
>>> I am currently working on a photo project, thanks to a GIMP update the
>>> other day, it no longer loads, and am fucked as I can't work!
>>>
>>> Mageia 8, x86_64.
>>>
>>>
>>> GEGL version too old!
>>>
>>>
>>>
>>> GIMP requires GEGL version 0.4.38 or later.
>>>
>>> Installed GEGL version is 0.4.36.
>>>
>>>
>>>
>>> Somehow you or your software packager managed
>>>
>>> to install GIMP with an older GEGL version.
>>>
>>>
>>>
>>> Please upgrade to GEGL version 0.4.38 or later.
>>
>> A search of the 'Net brings up a hit in
>> https://mageia.pkgs.org › 8 › mageia-core-updates-testing-x86_64
>>
>> lib64gegl0.4_0-0.4.38-1.mga8.x86_64.rpm
>>
>> Other than that, Mageia seems to be at 0.4.34 unless you
>> upgrade to Mga9. Perhaps enable testing and use mcc to see
>> if you can find the package(s) you need.
>>
>> Bear in mind, urpmi has --downgrade and --replacepkgs options.
>> You have to download the rpm(s) first and then it uses rpm
>> to do the deed.
>>
>> Cheers!
>
> 4.38 can be downloaded from
> http://mirror.math.princeton.edu/pub/mageia/distrib/8/SRPMS/core/updates_testing/gegl-0.4.38-1.mga8.src.rpm
>
> Regards, Dave Hodgins

Bug 32548 - gimp new security issues CVE-2023-4444[1-4]

It looks like one of the admin team forgot to push libgegl to updates
when gimp was pushed there, and it was finally done today, so that
should happen today by the Mageia Robot.
It should propagate to the mirrors in the next day or two.
Looks like the OP downloaded the new gimp just (well, a day) befor the
error was caught, since gimp was pushed up yesterday.

On 16/12/2023 15:12, Jim wrote:
>> Somehow you or your software packager managed
>>
>> to install GIMP with an older GEGL version.
>>
>>
>>
>> Please upgrade to GEGL version 0.4.38 or later.
>
> A search of the 'Net brings up a hit in
> https://mageia.pkgs.org › 8 › mageia-core-updates-testing-x86_64
>
> lib64gegl0.4_0-0.4.38-1.mga8.x86_64.rpm

I didn't try this file, but the packages list at the same site you gave
did have GIMP 2.10.32, it DOES NOT exist in the up-to-date media sources
/ package manager. So someone deleted that version, but left an even
older version, which is why I could not "downgrade".

Removing GIMP and two other library files allowed me to install the
downloaded GIMP 2.10.32, plus it automatically grabbed the older
dependencies which had not been deleted from the package manager.

I have the older version of GIMP working now, so can continue working.

Thank you for your help.

I have bookmarked the packages website in case I ever need it again.

On 16/12/2023 03:25, William Unruh wrote:
>> GIMP requires GEGL version 0.4.38 or later.
>>
>> Installed GEGL version is 0.4.36.
>>
>
> urpmi --downgrade gimp
> Installs the second newest version of gimp (2.10.32)

I tried your suggestion, but it didn't install. More digging I found
that someone has deleted GIMP 2.10.32 from the repositories, and so GIMP
could not be downgraded because the next version back was too old and
needed a tonne of dependencies.

I downloaded GIMP 2.10.32 from elsewhere, and it installed with the old
dependencies that hadn't been deleted from the package manager.

Thanks for your help.

On 16/12/2023 18:17, William Unruh wrote:
>
> Bug 32548 - gimp new security issues CVE-2023-4444[1-4]
>
> It looks like one of the admin team forgot to push libgegl to updates
> when gimp was pushed there, and it was finally done today, so that
> should happen today by the Mageia Robot.
> It should propagate to the mirrors in the next day or two.
> Looks like the OP downloaded the new gimp just (well, a day) befor the
> error was caught, since gimp was pushed up yesterday.

Thanks for that, very interesting. I had not spotted that bug report.

On 16/12/2023 15:12, Jim wrote:
> A search of the 'Net brings up a hit in
> https://mageia.pkgs.org › 8 › mageia-core-updates-testing-x86_64
>
> lib64gegl0.4_0-0.4.38-1.mga8.x86_64.rpm
>
> Other than that, Mageia seems to be at 0.4.34 unless you
> upgrade to Mga9. Perhaps enable testing and use mcc to see
> if you can find the package(s) you need.

I'm not due to install Mageia 9 until sometime over the Christmas
period, which is why I needed GIMP working before Christmas, to work!

Thanks for your help with the packages URL, which allowed me to get it
all running again eventually with the older GIMP (which was also deleted
from the package manager list).

On 2023-12-16 14:30, David W. Hodgins wrote:
> Agreed. Mistakes happen though as people are involved in creating the file
> used by the script that is used to push the updates from the updates
> testing
> repositories to the updates repositories and publish the advisory.
>
> In this case the m9 update only involved gimp, while the m8 update
> involved both
> gimp and gegl. The gegl srpm was missed when creating the file
> https://svnweb.mageia.org/advisories/32548.adv?revision=15416&view=markup
> that was used by the scripts that push the updates.
>
> The gegl srpm has since been added, but requires manual intervention by
> a sysadmin
> to actually get moved rather then just running the normal script.
>
The gegl rpms have finally been pushed, and should be making their way
through the mirrors now. We apologize for the issue, but we are only
human, after all.

> I'm no longer involved in the qa team by the way.
>
And we miss you, my friend.

TJ