{"id":"openSUSE-SU-2026:22123-1","summary":"Security update for gimp","details":"This update for gimp fixes the following issues:\n\nChanges in gimp:\n\n- CVE-2026-106061: plug-ins: Bound allocation for XMC import (bsc#1284473)\n- CVE-2026-106062: plug-ins/file-dds: fix out of bounds write (bsc#1284474)\n- CVE-2026-106063: plug-ins: Add bounds checks for DICOM export (bsc#1284475)\n- CVE-2026-82324: plug-ins: Add more checks for IFF import (bsc#1277594)\n- CVE-2026-82328: plug-ins: Use BPP for ICO palette allocation (bsc#1277618)\n- CVE-2026-82343: plug-ins: fix heap out of bounds in PSD loader (bsc#1277622)\n","modified":"2026-10-19T17:23:15.387370168Z","published":"2026-10-16T20:56:27Z","related":["CVE-2026-106061","CVE-2026-106062","CVE-2026-106063","CVE-2026-82324","CVE-2026-82328","CVE-2026-82343"],"upstream":["CVE-2026-106061","CVE-2026-106062","CVE-2026-106063","CVE-2026-82324","CVE-2026-82328","CVE-2026-82343"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277594"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277618"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277622"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284473"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284474"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284475"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-106061"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-106062"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-106063"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-82324"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-82328"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-82343"}],"affected":[{"package":{"name":"gimp","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/gimp&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-bp160.13.1"}]}],"ecosystem_specific":{"binaries":[{"gimp-vala":"3.0.8-bp160.13.1","gimp":"3.0.8-bp160.13.1","gimp-plugin-python3":"3.0.8-bp160.13.1","gimp-devel":"3.0.8-bp160.13.1","gimp-lang":"3.0.8-bp160.13.1","gimp-plugin-aa":"3.0.8-bp160.13.1","libgimp-3_0-0":"3.0.8-bp160.13.1","gimp-extension-goat-excercises":"3.0.8-bp160.13.1","libgimpui-3_0-0":"3.0.8-bp160.13.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22123-1.json"}}],"schema_version":"1.9.0"}