SUSE-SU-2026:4309-1: gimp&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:4309-1 is a vulnerability in gimp&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 23-09-2026
   PublishedVulnerability first disclosed.
2. 24-09-2026
   Last modifiedVulnerability information updated.

Description

Security update for gimp This update for gimp fixes the following issues: Security issues fixed: - CVE-2026-59088: denial of service via signed integer overflow in FLI file processing (bsc#1274837). - CVE-2026-59090: arbitrary code execution in PSD plugin due to unsigned underflow (bsc#1274840). - CVE-2026-66757: signed integer overflow in `file-sgi` causes the plugin to crash when RLE-compressed SGI images are processed (bsc#1273151). - CVE-2026-78465: 32-bit integer overflow in PCX image memory calculations can cause undersized heap allocations (bsc#1277378). - CVE-2026-80101: independent header field validation in the XWD loader can cause heap out-of-bounds reads (bsc#1276911). Non security issues fixed: - RLE-compressed SGI files are written with a bad offset table and 57 of 144 scanlines fail to decode, on the patched and the released build alike (bsc#1279838). - XWD bytes-per-line guard can never fire, and load_xwd_f1_d24_b1() still allocates the unchecked header field (bsc#1279839).

No weakness data has been published for this record.