Security vulnerabilities in Gimp allow code injection with manipulated files like GIFs. There is no update yet.