SUSE-SU-2026:4409-1
SUSE-SU-2026:4409-1 · Security update for gimp
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for gimp fixes the following issues: - CVE-2026-18301: Vulnerability Report at read_channel_data (bsc#1276230). - CVE-2026-18302: TIF File Parsing Heap-based Buffer Overflow (bsc#1276231). - CVE-2026-18303: TIF File Parsing Stack-based Buffer Overflow (bsc#1276232). - CVE-2026-18304: TIF File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276233). - CVE-2026-18305: TIF File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276234). - CVE-2026-18306: SGI File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276235). - CVE-2026-18307: File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (bsc#1276236). - CVE-2026-90947: out-of-bounds write in the lighting effects plugin when processing a crafted preset file due to improper validation of the number of light sources (bsc#1280511). - CVE-2026-90948: heap buffer overflow in the ICO loader when processing ICO files with embedded PNG images due to an integer overflow during calculation of buffer sizes (bsc#1280512). - CVE-2026-92248: integer overflow when generating a thumbnail preview for a PSD file can lead to a heap buffer overflow (bsc#1280739).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
gimp SUSE:Linux Enterprise Module for Package Hub 15 SP7
- Intervalos de versiones afectados
- ECOSYSTEM: < 2.10.30-150400.3.79.1
Actualiza a 2.10.30-150400.3.79.1
gimp SUSE:Linux Enterprise Workstation Extension 15 SP7
- Intervalos de versiones afectados
- ECOSYSTEM: < 2.10.30-150400.3.79.1
Actualiza a 2.10.30-150400.3.79.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2026/suse-su-20264409-1/
- https://bugzilla.suse.com/1276230
- https://bugzilla.suse.com/1276231
- https://bugzilla.suse.com/1276232
- https://bugzilla.suse.com/1276233
- https://bugzilla.suse.com/1276234
- https://bugzilla.suse.com/1276235
- https://bugzilla.suse.com/1276236
- https://bugzilla.suse.com/1280511
- https://bugzilla.suse.com/1280512
- https://bugzilla.suse.com/1280739
- https://www.suse.com/security/cve/CVE-2026-18301
- https://www.suse.com/security/cve/CVE-2026-18302
- https://www.suse.com/security/cve/CVE-2026-18303
- https://www.suse.com/security/cve/CVE-2026-18304
- https://www.suse.com/security/cve/CVE-2026-18305
- https://www.suse.com/security/cve/CVE-2026-18306
- https://www.suse.com/security/cve/CVE-2026-18307
- https://www.suse.com/security/cve/CVE-2026-90947
- https://www.suse.com/security/cve/CVE-2026-90948
- https://www.suse.com/security/cve/CVE-2026-92248
- https://osv.dev/vulnerability/SUSE-SU-2026:4409-1