OESA-2026-3414

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3414

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-3414.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-3414

Upstream

CVE-2026-42169

Published

2026-08-20T09:54:58Z

Modified

2026-08-20T10:15:07Z

Severity

7.3 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

gimp security update

Details

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute.

Security Fix(es):

A vulnerability classified as critical has been found in GIMP (Image Processing Software) (unknown version).CWE is classifying the issue as CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().This is going to have an impact on confidentiality, integrity, and availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2026-42169)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:24.03-LTS-SP3 / gimp

Package

Name: gimp
Purl: pkg:rpm/openEuler/gimp&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.0.2-19.oe2403sp3

Ecosystem specific

{
    "aarch64": [
        "gimp-3.0.2-19.oe2403sp3.aarch64.rpm",
        "gimp-debuginfo-3.0.2-19.oe2403sp3.aarch64.rpm",
        "gimp-debugsource-3.0.2-19.oe2403sp3.aarch64.rpm",
        "gimp-devel-3.0.2-19.oe2403sp3.aarch64.rpm",
        "gimp-extension-goat-excercises-3.0.2-19.oe2403sp3.aarch64.rpm",
        "gimp-libs-3.0.2-19.oe2403sp3.aarch64.rpm",
        "gimp-plugin-aa-3.0.2-19.oe2403sp3.aarch64.rpm",
        "gimp-plugin-python3-3.0.2-19.oe2403sp3.aarch64.rpm",
        "gimp-vala-3.0.2-19.oe2403sp3.aarch64.rpm"
    ],
    "src": [
        "gimp-3.0.2-19.oe2403sp3.src.rpm"
    ],
    "x86_64": [
        "gimp-3.0.2-19.oe2403sp3.x86_64.rpm",
        "gimp-debuginfo-3.0.2-19.oe2403sp3.x86_64.rpm",
        "gimp-debugsource-3.0.2-19.oe2403sp3.x86_64.rpm",
        "gimp-devel-3.0.2-19.oe2403sp3.x86_64.rpm",
        "gimp-extension-goat-excercises-3.0.2-19.oe2403sp3.x86_64.rpm",
        "gimp-libs-3.0.2-19.oe2403sp3.x86_64.rpm",
        "gimp-plugin-aa-3.0.2-19.oe2403sp3.x86_64.rpm",
        "gimp-plugin-python3-3.0.2-19.oe2403sp3.x86_64.rpm",
        "gimp-vala-3.0.2-19.oe2403sp3.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-3414.json"