p PatchFirst

SUSE-SU-2026:0604-1

SUSE-SU-2026:0604-1 · Security update for gimp

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for gimp fixes the following issues: - CVE-2026-2272: integer overflow in ICO file handling can lead to a heap buffer overflow (bsc#1258000). - CVE-2026-2271: integer overflow in the PSP file parser can lead to a heap buffer overflow (bsc#1257999). - CVE-2026-2239: missing null terminator when processing a specially crafted PSD file can lead to a heap buffer overflow and an application crash (bsc#1257959).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • gimp SUSE:Linux Enterprise Module for Package Hub 15 SP7

    Affected ranges
    • ECOSYSTEM: < 2.10.30-150400.3.44.1

    Update to 2.10.30-150400.3.44.1

  • gimp SUSE:Linux Enterprise Workstation Extension 15 SP7

    Affected ranges
    • ECOSYSTEM: < 2.10.30-150400.3.44.1

    Update to 2.10.30-150400.3.44.1

  • gimp openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 2.10.30-150400.3.44.1

    Update to 2.10.30-150400.3.44.1

Original sources

Check your server →