openSUSE-SU-2026:22025-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22025-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2026:22025-1
- Upstream
CVE (2)
- CVE-2026-96546
- CVE-2026-97185
- Related
- Published
- 2026-10-06T11:08:22Z
- Modified
- 2026-10-07T17:23:12Z
- Summary
- Security update for gimp
- Details
-
This update for gimp fixes the following issues:
Changes in gimp:
- CVE-2026-96546: one-byte out-of-bounds heap read in the uncompressed DDS loader (bsc#1282601)
- CVE-2026-97185: out-of-bounds write in GIMPressionist plugin via crafted preset file (bsc#1282596)
- References
Affected packages
openSUSE:Leap 16.0 / gimp
Package
- Name
- gimp
- Purl
- pkg:rpm/opensuse/gimp&distro=openSUSE%20Leap%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed3.0.8-bp160.12.1
Ecosystem specific
{
"binaries": [
{
"gimp": "3.0.8-bp160.12.1",
"gimp-devel": "3.0.8-bp160.12.1",
"gimp-extension-goat-excercises": "3.0.8-bp160.12.1",
"gimp-lang": "3.0.8-bp160.12.1",
"gimp-plugin-aa": "3.0.8-bp160.12.1",
"gimp-plugin-python3": "3.0.8-bp160.12.1",
"gimp-vala": "3.0.8-bp160.12.1",
"libgimp-3_0-0": "3.0.8-bp160.12.1",
"libgimpui-3_0-0": "3.0.8-bp160.12.1"
}
]
}