p PatchFirst

openSUSE-SU-2026:21869-1

openSUSE-SU-2026:21869-1 · Security update for gimp

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-78465: 32-bit integer overflow in PCX image memory calculations can cause undersized heap allocations (bsc#1277378) - CVE-2026-78475: unbounded variable-length stack allocations in the PIX loader can cause stack exhaustion crashes and stack memory disclosures (bsc#1277380) - CVE-2026-80101: independent header field validation in the XWD loader can cause heap out-of-bounds reads (bsc#1276911)

Fix available

Published
Updated

Stack: system

Affected products and versions

  • gimp openSUSE:Leap 16.0

    Affected ranges
    • ECOSYSTEM: < 3.0.8-bp160.9.1

    Update to 3.0.8-bp160.9.1

Original sources

Check your server →