openSUSE-SU-2026:20100-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20100-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20100-1
Upstream
CVE (4)
Related
CVE (4)
Published
2026-01-21T13:31:29Z
Modified
2026-03-23T04:54:43Z
Summary
Security update for gimp
Details

This update for gimp fixes the following issues:

Changes in gimp:

  • CVE-2025-14422: Fixed PNM File Parsing Integer Overflow (bsc#1255293)
  • CVE-2025-14423: Fixed LBM File Parsing Stack-based Buffer Overflow (bsc#1255294)
  • CVE-2025-14424: Fixed XCF File Parsing Use-After-Free (bsc#1255295)
  • CVE-2025-14425: Fixed JP2 File Parsing Heap-based Buffer Overflow(bsc#1255296)
References

Affected packages

openSUSE:Leap 16.0 / gimp

Package

Name
gimp
Purl
pkg:rpm/opensuse/gimp&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.0.6-bp160.2.1

Ecosystem specific 

{
    "binaries":  [
        {
            "gimp":  "3.0.6-bp160.2.1",
            "gimp-devel":  "3.0.6-bp160.2.1",
            "gimp-extension-goat-excercises":  "3.0.6-bp160.2.1",
            "gimp-lang":  "3.0.6-bp160.2.1",
            "gimp-plugin-aa":  "3.0.6-bp160.2.1",
            "gimp-plugin-python3":  "3.0.6-bp160.2.1",
            "gimp-vala":  "3.0.6-bp160.2.1",
            "libgimp-3_0-0":  "3.0.6-bp160.2.1",
            "libgimpui-3_0-0":  "3.0.6-bp160.2.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20100-1.json"