SUSE-SU-2026:4409-1

SUSE-SU-2026:4409-1 · Security update for gimp

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for gimp fixes the following issues: - CVE-2026-18301: Vulnerability Report at read_channel_data (bsc#1276230). - CVE-2026-18302: TIF File Parsing Heap-based Buffer Overflow (bsc#1276231). - CVE-2026-18303: TIF File Parsing Stack-based Buffer Overflow (bsc#1276232). - CVE-2026-18304: TIF File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276233). - CVE-2026-18305: TIF File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276234). - CVE-2026-18306: SGI File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276235). - CVE-2026-18307: File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (bsc#1276236). - CVE-2026-90947: out-of-bounds write in the lighting effects plugin when processing a crafted preset file due to improper validation of the number of light sources (bsc#1280511). - CVE-2026-90948: heap buffer overflow in the ICO loader when processing ICO files with embedded PNG images due to an integer overflow during calculation of buffer sizes (bsc#1280512). - CVE-2026-92248: integer overflow when generating a thumbnail preview for a PSD file can lead to a heap buffer overflow (bsc#1280739).

Fix available

Published

2026-10-01T07:07:35Z

Updated

2026-10-01T17:30:06.287874640Z

Stack: system

Check your server →