Cannot open file from https location (URL)

Bug #1649428 reported by Andreas Schildbach
264
This bug affects 3 people
Affects Status Importance Assigned to Milestone
gimp (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

If I try, I get this GIMP message:

  Opening 'https://[...]' failed:

  Could not load 'https://[...]': Failed to open file 'https://[...]': open() failed: No such file or directory

Most of the time, I can manually edit the URL to read http://[...] and I can open the document as expected.

The bug is a security vulnerability because it forces users to use unsecure communication.

$ lsb_release -rd
Description: Ubuntu 16.04.1 LTS
Release: 16.04

$ apt-cache policy gimp
gimp:
  Installed: 2.8.16-1ubuntu1.1
  Candidate: 2.8.16-1ubuntu1.1
  Version table:
 *** 2.8.16-1ubuntu1.1 500
        500 http://archive.ubuntu.com/ubuntu xenial-updates/universe amd64 Packages
        500 http://archive.ubuntu.com/ubuntu xenial-security/universe amd64 Packages
        100 /var/lib/dpkg/status
     2.8.16-1ubuntu1 500
        500 http://archive.ubuntu.com/ubuntu xenial/universe amd64 Packages

information type: Private Security → Public Security
Revision history for this message
Michael Schumacher (schumaml) wrote :

Might be missing SSL support in some library or tool, or a failure to access that particular server - the file-uri plug-in can be built to use through gvfs, libcurl or wget, cf. https://git.gnome.org/browse/gimp/tree/plug-ins/file-uri/Makefile.am?h=gimp-2-8#n26

My bet for the Ubuntu packages is on gvfs, as the gimp package doesn't seem to have a dependency on libcurl or wget. I'm not running Ubuntu and thus can't check, though.

information type: Public Security → Public
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in gimp (Ubuntu):
status: New → Confirmed
Revision history for this message
Paulo Marcel Coelho Aragão (marcelpaulo) wrote :

I'm running Xubuntu 17.10 with gimp 2.8.20 and I still can't open https URLs with gimp. According to this upstream bug report:

https://bugzilla.gnome.org/show_bug.cgi?id=782319

gimp 2.8 should be able to open https URLs as long as glib-networking is installed, here I quote that bug report:

> If it is installed while not working, it probably means it is not found at runtime for a reason
> which pertains to how the system is set up.

I have glib-networking 2.54.0-1 installed but I still can't open https URLs, so there's something wrong with the build and/or packaging.

Revision history for this message
Luís Infante da Câmara (luis220413) wrote :

Ubuntu 16.04 reached end of standard support on April 2021 and ESM does not cover this package.
Ubuntu 17.10 reached end-of-life on July 2018.

Please try to reproduce this bug on a supported Ubuntu release.

information type: Public → Public Security
Changed in gimp (Ubuntu):
status: Confirmed → Incomplete
Revision history for this message
Paul White (paulw2u) wrote :

Bug report did not expire due to bug watch
Upstream issue closed "RESOLVED OBSOLETE" on 2018-04-22
with two comments to say issue fixed in version 2.10.
Works for me using Ubuntu 22.04
No reply to comment #3 so closing as bug now fixed.

Changed in gimp (Ubuntu):
status: Incomplete → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.