openSUSE-SU-2026:22123-1
openSUSE-SU-2026:22123-1 · Security update for gimp
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-106061: plug-ins: Bound allocation for XMC import (bsc#1284473) - CVE-2026-106062: plug-ins/file-dds: fix out of bounds write (bsc#1284474) - CVE-2026-106063: plug-ins: Add bounds checks for DICOM export (bsc#1284475) - CVE-2026-82324: plug-ins: Add more checks for IFF import (bsc#1277594) - CVE-2026-82328: plug-ins: Use BPP for ICO palette allocation (bsc#1277618) - CVE-2026-82343: plug-ins: fix heap out of bounds in PSD loader (bsc#1277622)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
gimp openSUSE:Leap 16.0
- Affected ranges
- ECOSYSTEM: < 3.0.8-bp160.13.1
Update to 3.0.8-bp160.13.1
Original sources
- https://bugzilla.suse.com/1277594
- https://bugzilla.suse.com/1277618
- https://bugzilla.suse.com/1277622
- https://bugzilla.suse.com/1284473
- https://bugzilla.suse.com/1284474
- https://bugzilla.suse.com/1284475
- https://www.suse.com/security/cve/CVE-2026-106061
- https://www.suse.com/security/cve/CVE-2026-106062
- https://www.suse.com/security/cve/CVE-2026-106063
- https://www.suse.com/security/cve/CVE-2026-82324
- https://www.suse.com/security/cve/CVE-2026-82328
- https://www.suse.com/security/cve/CVE-2026-82343
- https://osv.dev/vulnerability/openSUSE-SU-2026:22123-1