SUSE-SU-2026:0313-1

Details

This update for gimp fixes the following issues:

CVE-2025-14422: Fixed RCE vulnerability due to PNM file parsing integer overflow (bsc#1255293)
CVE-2025-14425: Fixed RCE vulnerability due to JP2 file parsing heap-based buffer overflow (bsc#1255296)

Affected Packages

gimp

SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Workstation Extension 15 SP7openSUSE Leap 15.6

Fixed in:

2.10.30-150400.3.38.1

gimp-devel

SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Workstation Extension 15 SP7openSUSE Leap 15.6

Fixed in:

2.10.30-150400.3.38.1

gimp-lang

SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Workstation Extension 15 SP7openSUSE Leap 15.6

Fixed in:

2.10.30-150400.3.38.1

gimp-plugin-aa

SUSE Linux Enterprise Module for Package Hub 15 SP7openSUSE Leap 15.6

Fixed in:

2.10.30-150400.3.38.1

libgimp-2_0-0

SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Workstation Extension 15 SP7openSUSE Leap 15.6

Fixed in:

2.10.30-150400.3.38.1

libgimpui-2_0-0

SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Workstation Extension 15 SP7openSUSE Leap 15.6

Fixed in:

2.10.30-150400.3.38.1

libgimp-2_0-0-32bit

openSUSE Leap 15.6

Fixed in:

2.10.30-150400.3.38.1

libgimpui-2_0-0-32bit

openSUSE Leap 15.6

Fixed in:

2.10.30-150400.3.38.1

References