SUSE-SU-2026:3399-1

Details

Description of the patch:

This update for gimp fixes the following issues

CVE-2026-58379: Heap buffer overflow in read_channel_data() (bsc#1270299).
CVE-2026-58380: Stack buffer overflow in pnmscanner_gettoken() (bsc#1270444).
CVE-2026-58381: double-free in read_layer_block() (bsc#1270239).

Affected Packages

gimp

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7SUSE Linux Enterprise Workstation Extension 15 SP7

Fixed in:

2.10.30-150400.3.58.1

gimp-devel

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7SUSE Linux Enterprise Workstation Extension 15 SP7

Fixed in:

2.10.30-150400.3.58.1

gimp-lang

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7SUSE Linux Enterprise Workstation Extension 15 SP7

Fixed in:

2.10.30-150400.3.58.1

libgimp-2_0-0

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7SUSE Linux Enterprise Workstation Extension 15 SP7

Fixed in:

2.10.30-150400.3.58.1

libgimpui-2_0-0

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7SUSE Linux Enterprise Workstation Extension 15 SP7

Fixed in:

2.10.30-150400.3.58.1

gimp-plugin-aa

SUSE Linux Enterprise Module for Package Hub 15 SP7

Fixed in:

2.10.30-150400.3.58.1

References

ADVISORY

https://bugzilla.suse.com/1270239

ADVISORY

https://bugzilla.suse.com/1270299

ADVISORY