openSUSE-SU-2026:21869-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21869-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/openSUSE-SU-2026:21869-1
- Upstream
CVE (3)
- CVE-2026-78465
- CVE-2026-78475
- CVE-2026-80101
- Related
- Published
- 2026-09-16T16:32:09Z
- Modified
- 2026-09-17T18:23:34Z
- Summary
- Security update for gimp
- Details
-
This update for gimp fixes the following issues:
Changes in gimp:
- CVE-2026-78465: 32-bit integer overflow in PCX image memory calculations can cause undersized heap allocations (bsc#1277378)
- CVE-2026-78475: unbounded variable-length stack allocations in the PIX loader can cause stack exhaustion crashes and stack memory disclosures (bsc#1277380)
- CVE-2026-80101: independent header field validation in the XWD loader can cause heap out-of-bounds reads (bsc#1276911)
- References
Affected packages
openSUSE:Leap 16.0 / gimp
Package
- Name
- gimp
- Purl
- pkg:rpm/opensuse/gimp&distro=openSUSE%20Leap%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed3.0.8-bp160.9.1
Ecosystem specific
{
"binaries": [
{
"gimp": "3.0.8-bp160.9.1",
"gimp-devel": "3.0.8-bp160.9.1",
"gimp-extension-goat-excercises": "3.0.8-bp160.9.1",
"gimp-lang": "3.0.8-bp160.9.1",
"gimp-plugin-aa": "3.0.8-bp160.9.1",
"gimp-plugin-python3": "3.0.8-bp160.9.1",
"gimp-vala": "3.0.8-bp160.9.1",
"libgimp-3_0-0": "3.0.8-bp160.9.1",
"libgimpui-3_0-0": "3.0.8-bp160.9.1"
}
]
}