This update for gimp fixes the following issues:
Changes in gimp:
- CVE-2026-106061: plug-ins: Bound allocation for XMC import (bsc#1284473)
- CVE-2026-106062: plug-ins/file-dds: fix out of bounds write (bsc#1284474)
- CVE-2026-106063: plug-ins: Add bounds checks for DICOM export (bsc#1284475)
- CVE-2026-82324: plug-ins: Add more checks for IFF import (bsc#1277594)
- CVE-2026-82328: plug-ins: Use BPP for ICO palette allocation (bsc#1277618)
- CVE-2026-82343: plug-ins: fix heap out of bounds in PSD loader (bsc#1277622)
This update for gimp fixes the following issues:
Changes in gimp:
- CVE-2026-96546: one-byte out-of-bounds heap read in the
uncompressed DDS loader (bsc#1282601)
- CVE-2026-97185: out-of-bounds write in GIMPressionist plugin via
crafted preset file (bsc#1282596)
This update for gimp fixes the following issues:
Changes in gimp:
- CVE-2026-78465: 32-bit integer overflow in PCX image memory calculations can cause undersized heap allocations (bsc#1277378)
- CVE-2026-78475: unbounded variable-length stack allocations in the PIX loader can cause stack exhaustion crashes and stack memory disclosures (bsc#1277380)
- CVE-2026-80101: independent header field validation in the XWD loader can cause heap out-of-bounds reads (bsc#1276911)
This update for gimp fixes the following issues:
Changes in gimp:
- CVE-2026-66757: Fixed signed integer overflow in `file-sgi` causes the plugin to crash when RLE-compressed SGI images are processed (bsc#1279838).
This update for gimp fixes the following issues:
Changes in gimp:
- CVE-2026-66757: signed integer overflow in `file-sgi` causes the plugin to crash when RLE-compressed SGI images are processed (bsc#1273151)
- CVE-2026-66758: integer overflow in `file-fits` plugin causes a heap-based buffer overflow when crafted FITS images are processed (bsc#1273152)
- CVE-2026-66759: out-of-bounds read in `file-icns` plugin causes information disclosure or crash when crafted ICNS images are processed (bsc#1273153)
This update for gimp fixes the following issues:
Changes in gimp:
- Update to 3.0.8
- Font Loading Performance
- Improvements in start-up time for users with a large number
of fonts was backported from our 3.2 RC2 release. As a
result, we now wait to load images until fonts are
initialized - this prevents some occasional odd displays and
other issues when an XCF file tried to access a partially
loaded font.
- Assorted updates and fixes
- Daniel Plakhotich helped us identify an issue when exporting
a lossless WEBP image could be affected by lossy settings
(such as Quality being less than
This update for gimp fixes the following issues:
Changes in gimp:
Update to 3.0.6:
- Security:
- During development, we received reports from the Zero Day
Initiative of potential security issues with some of our file
import plug-ins. While these issues are very unlikely to
occur with real files, developers like Jacob Boerema and Alx
Sa proactively improved security for those imports.
The resolved reports are:
- ZDI-CAN-27793
- ZDI-CAN-27823
- ZDI-CAN-27836
- ZDI-CAN-27878
- ZDI-CAN-27863
- ZDI-CAN-27684
- Core:
- Many false-positive build warnings have been cl