gpp_maybe Security update for gimp

SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-604

This update for gimp fixes the following issues: - CVE-2026-2272: integer overflow in ICO file handling can lead to a heap buffer overflow (bsc#1258000). - CVE-2026-2271: integer overflow in the PSP file parser can lead to a heap buffer overflow (bsc#1257999). - CVE-2026-2239: missing null terminator when processing a specially crafted PSD file can lead to a heap buffer overflow and an application crash (bsc#1257959).

• Release Date
  Feb 24 2026
• References
  Bugzilla: 1258000, 1257999, 1257959
  CVEs: CVE-2026-2271, CVE-2026-2239, CVE-2026-2272
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Package Hub 15.7 ppc64le

• Packages
  gimp
  The GNU Image Manipulation Program

  2.10.30-150400.3.44.1 lock src

  libgimp-2_0-0
  The GNU Image Manipulation Program - Libraries

  2.10.30-150400.3.44.1 lock rpm

  libgimpui-2_0-0
  The GNU Image Manipulation Program - UI Libraries

  2.10.30-150400.3.44.1 lock rpm

SUSE Package Hub 15.7 aarch64

• Packages
  gimp
  The GNU Image Manipulation Program

  2.10.30-150400.3.44.1 lock rpm lock src

  gimp-devel
  The GNU Image Manipulation Program

  2.10.30-150400.3.44.1 lock rpm

  gimp-lang
  Translations for package gimp

  2.10.30-150400.3.44.1 lock rpm

  gimp-plugin-aa
  The GNU Image Manipulation Program -- ASCII-Art output plugin

  2.10.30-150400.3.44.1 lock rpm

  libgimp-2_0-0
  The GNU Image Manipulation Program - Libraries

  2.10.30-150400.3.44.1 lock rpm

  libgimpui-2_0-0
  The GNU Image Manipulation Program - UI Libraries

  2.10.30-150400.3.44.1 lock rpm

SUSE Package Hub 15.7 s390x

• Packages
  gimp
  The GNU Image Manipulation Program

  2.10.30-150400.3.44.1 lock src

  libgimp-2_0-0
  The GNU Image Manipulation Program - Libraries

  2.10.30-150400.3.44.1 lock rpm

  libgimpui-2_0-0
  The GNU Image Manipulation Program - UI Libraries

  2.10.30-150400.3.44.1 lock rpm