SUSE-SU-2025:4333-1

HIGH7.8

Security update for gegl

Published Dec 9, 2025

Modified 6 months ago

Fix available

Details

Description of the patch:

This update for gegl fixes the following issues:

CVE-2025-10921: Fixed HDR file parsing heap-based buffer overflow that can lead to remote code execution. (bsc#1250496)

Affected Packages

gegl-0_3

SUSE Linux Enterprise Desktop 15 SP6SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise Server 15 SP6SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP6

Fixed in:

0.3.34-150000.3.6.1

libgegl-0_3-0

SUSE Linux Enterprise Desktop 15 SP6SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise Server 15 SP6SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP6

Fixed in:

0.3.34-150000.3.6.1

typelib-1_0-Gegl-0_3

SUSE Linux Enterprise Desktop 15 SP6SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise Server 15 SP6SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP6

Fixed in:

0.3.34-150000.3.6.1

References

ADVISORY

https://bugzilla.suse.com/1250496

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2025-December/023450.html

ADVISORY

https://www.suse.com/security/cve/CVE-2025-10921/

WEB

https://www.suse.com/support/security/rating/

ADVISORY