p PatchFirst

SUSE-SU-2025:02164-1

SUSE-SU-2025:02164-1 · Security update for gimp

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for gimp fixes the following issues: - CVE-2025-48797: Fixed two buffer over-reads and one heap-based buffer overflow in its TGA parser (bsc#1243711). - CVE-2025-48798: Fixed two use-after-free bugs and one double free bug in its XCF parser (bsc#1243712).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • gimp SUSE:Linux Enterprise Module for Package Hub 15 SP6

    Affected ranges
    • ECOSYSTEM: < 2.10.30-150400.3.20.1

    Update to 2.10.30-150400.3.20.1

  • gimp SUSE:Linux Enterprise Module for Package Hub 15 SP7

    Affected ranges
    • ECOSYSTEM: < 2.10.30-150400.3.20.1

    Update to 2.10.30-150400.3.20.1

  • gimp SUSE:Linux Enterprise Workstation Extension 15 SP6

    Affected ranges
    • ECOSYSTEM: < 2.10.30-150400.3.20.1

    Update to 2.10.30-150400.3.20.1

  • gimp SUSE:Linux Enterprise Workstation Extension 15 SP7

    Affected ranges
    • ECOSYSTEM: < 2.10.30-150400.3.20.1

    Update to 2.10.30-150400.3.20.1

  • gimp openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 2.10.30-150400.3.20.1

    Update to 2.10.30-150400.3.20.1

Original sources

Check your server →