openSUSE-SU-2026:20100-1
openSUSE-SU-2026:20100-1 · Security update for gimp
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for gimp fixes the following issues: Changes in gimp: - CVE-2025-14422: Fixed PNM File Parsing Integer Overflow (bsc#1255293) - CVE-2025-14423: Fixed LBM File Parsing Stack-based Buffer Overflow (bsc#1255294) - CVE-2025-14424: Fixed XCF File Parsing Use-After-Free (bsc#1255295) - CVE-2025-14425: Fixed JP2 File Parsing Heap-based Buffer Overflow(bsc#1255296)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
gimp openSUSE:Leap 16.0
- Affected ranges
- ECOSYSTEM: < 3.0.6-bp160.2.1
Update to 3.0.6-bp160.2.1
Original sources
- https://bugzilla.suse.com/1255293
- https://bugzilla.suse.com/1255294
- https://bugzilla.suse.com/1255295
- https://bugzilla.suse.com/1255296
- https://www.suse.com/security/cve/CVE-2025-14422
- https://www.suse.com/security/cve/CVE-2025-14423
- https://www.suse.com/security/cve/CVE-2025-14424
- https://www.suse.com/security/cve/CVE-2025-14425
- https://osv.dev/vulnerability/openSUSE-SU-2026:20100-1