OPENSUSE-RU-2026:20168-1

Vulnerability from csaf_opensuse - Published: 2026-02-03 18:05 - Updated: 2026-02-03 18:05
Summary
Recommended update for gimp

Notes

Title of the patch
Recommended update for gimp
Description of the patch
This update for gimp fixes the following issues: Changes in gimp: - Update to 3.0.8 - Font Loading Performance - Improvements in start-up time for users with a large number of fonts was backported from our 3.2 RC2 release. As a result, we now wait to load images until fonts are initialized - this prevents some occasional odd displays and other issues when an XCF file tried to access a partially loaded font. - Assorted updates and fixes - Daniel Plakhotich helped us identify an issue when exporting a lossless WEBP image could be affected by lossy settings (such as Quality being less than 100%). We’ve updated our WEBP plug-in to prevent this from happening. - Thanks to Jehan‘s efforts, the standard gimp-3.0 executable can now be run with a --no-interface flag instead of requiring users to call gimp-console-3.0 even on devices with no display. The --show-debug-menu flag is now visible as well. - programmer_ceds improved our flatpak by adding safe guards to show the correct configuration directory regardless of whether XDG_CONFIG_HOME is defined on the user’s system. This should make it much easier for flatpak users to install and use third party plug-ins. - We fixed a rare but possible crash when using the Equalize filter on images with NaN values. Images that contain these are usually created from scientific or mapping data, so you’re unlikely to come across them in standard editing. - Jeremy Bicha fixed an internal issue where the wrong version number could be used when installing minor releases (such as the 3.2 release candidates and upcoming 3.2 stable release). - As noted in our 3.2RC2 news post, we have updated our SVG import code to improve the rendered path. - Further improvements have been made to our non-destructive filter code to improve stability, especially when copying and pasting layers and images with filters attached to them. Some issues related to applying NDE filters on Quick Masks have also been corrected. - An unintended Search pop-up that appeared when typing while the Channels dockable was selected has been turned off. - When saving XCFs for GIMP 2.10 compatibility, we unintentionally saved Grid color using the new color format. This caused errors when reopening the XCF in 2.10. This problem has now been fixed! If you encounter any other XCF incompatibility, please let us know. - Themes and UX - The Navigation and Selection Editor dockables no longer show a large bright texture when no image is actively selected. This was especially noticeable on dark themes. - When a layer has no active filters, the Fx column had the same “checkbox” outline when hovered over as the lock column. This led to confusion about clicking it to add filters. We have removed the outline on hover as a small step to help address this. - Ondřej Míchal fixed alignment and cut-off issues with the buttons on our Transform tool overlays. All buttons should now be properly centered and visible. - The options for filling layers with colors when resizing the canvas will be turned off when not relevant (such as when you set layers to not be resized). - More GUI elements such as dialog header icons will now respond to your icon size preferences. - Ondřej Míchal has continued his work to update our UI with the more usable Spin Scale widget. He has also updated the widget itself to improve how it works for users and developers alike. - Security fixes - Jacob Boerema and Gabriele Barbero continued to patch potential security issues related to some of our file format plug-ins. In addition to existing fixes mentioned in the release candidate news posts, the following exploits are now prevented: ZDI-CAN-28232 ZDI-CAN-28265 ZDI-CAN-28530 ZDI-CAN-28591 ZDI-CAN-28599 - Another potential issue related to ICO files with incorrect metadata was reported by Dhiraj. It does not have a CVE number yet, but it has been fixed for GIMP 3.0.8. Jacob Boerema also fixed a potential issue with loading Creator blocks in Paintshop Pro PSP images. - API - For plug-in and script developers, a few new public APIs were backported to GIMP 3.0.8. gimp_cairo_surface_get_buffer () allows you to retrieve a GEGL buffer from a Cairo surface (such as a text layer). Note that this deprecates gimp_cairo_surface_create_buffer (). - gimp_config_set_xcf_version () and gimp_config_get_xcf_version () can be used to specify a particular XCF version for a configuration. This will allow you to have that data serialized/deserialized for certain versions of GIMP if there were differences (such as the Grid colors mentioned above). - Fixes were made for retrieving image metadata via scripting. GimpMetadata is now a visible child of GExiv2Metadata, so you can use standard gexiv2 functions to retrieve information from it. - Original thumbnail metadata is also now removed on export to prevent potential issues when exporting into a new format.
Patchnames
openSUSE-Leap-16.0-packagehub-106
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Recommended update for gimp",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for gimp fixes the following issues:\n\nChanges in gimp:\n\n- Update to 3.0.8\n  - Font Loading Performance\n    - Improvements in start-up time for users with a large number\n      of fonts was backported from our 3.2 RC2 release. As a\n      result, we now wait to load images until fonts are\n      initialized - this prevents some occasional odd displays and\n      other issues when an XCF file tried to access a partially\n      loaded font.\n  - Assorted updates and fixes\n    - Daniel Plakhotich helped us identify an issue when exporting\n      a lossless WEBP image could be affected by lossy settings\n      (such as Quality being less than 100%). We\u2019ve updated our\n      WEBP plug-in to prevent this from happening.\n    - Thanks to Jehan\u2018s efforts, the standard gimp-3.0 executable\n      can now be run with a --no-interface flag instead of\n      requiring users to call gimp-console-3.0 even on devices with\n      no display. The --show-debug-menu flag is now visible as\n      well.\n    - programmer_ceds improved our flatpak by adding safe guards to\n      show the correct configuration directory regardless of\n      whether XDG_CONFIG_HOME is defined on the user\u2019s system. This\n      should make it much easier for flatpak users to install and\n      use third party plug-ins.\n    - We fixed a rare but possible crash when using the Equalize\n      filter on images with NaN values. Images that contain these\n      are usually created from scientific or mapping data, so\n      you\u2019re unlikely to come across them in standard editing.\n    - Jeremy Bicha fixed an internal issue where the wrong version\n      number could be used when installing minor releases (such as\n      the 3.2 release candidates and upcoming 3.2 stable release).\n    - As noted in our 3.2RC2 news post, we have updated our SVG\n      import code to improve the rendered path.\n    - Further improvements have been made to our non-destructive\n      filter code to improve stability, especially when copying and\n      pasting layers and images with filters attached to them. Some\n      issues related to applying NDE filters on Quick Masks have\n      also been corrected.\n    - An unintended Search pop-up that appeared when typing while\n      the Channels dockable was selected has been turned off.\n    - When saving XCFs for GIMP 2.10 compatibility, we\n      unintentionally saved Grid color using the new color format.\n      This caused errors when reopening the XCF in 2.10. This\n      problem has now been fixed! If you encounter any other XCF\n      incompatibility, please let us know.\n  - Themes and UX\n    - The Navigation and Selection Editor dockables no longer show\n      a large bright texture when no image is actively selected.\n      This was especially noticeable on dark themes.\n    - When a layer has no active filters, the Fx column had the\n      same \u201ccheckbox\u201d outline when hovered over as the lock column.\n      This led to confusion about clicking it to add filters. We\n      have removed the outline on hover as a small step to help\n      address this.\n    - Ond\u0159ej M\u00edchal fixed alignment and cut-off issues with the\n      buttons on our Transform tool overlays. All buttons should\n      now be properly centered and visible.\n    - The options for filling layers with colors when resizing the\n      canvas will be turned off when not relevant (such as when you\n      set layers to not be resized).\n    - More GUI elements such as dialog header icons will now\n      respond to your icon size preferences.\n    - Ond\u0159ej M\u00edchal has continued his work to update our UI with\n      the more usable Spin Scale widget. He has also updated the\n      widget itself to improve how it works for users and\n      developers alike.\n  - Security fixes\n    - Jacob Boerema and Gabriele Barbero continued to patch\n      potential security issues related to some of our file format\n      plug-ins. In addition to existing fixes mentioned in the\n      release candidate news posts, the following exploits are now\n      prevented: ZDI-CAN-28232 ZDI-CAN-28265 ZDI-CAN-28530\n      ZDI-CAN-28591 ZDI-CAN-28599\n    - Another potential issue related to ICO files with incorrect\n      metadata was reported by Dhiraj. It does not have a CVE\n      number yet, but it has been fixed for GIMP 3.0.8. Jacob\n      Boerema also fixed a potential issue with loading Creator\n      blocks in Paintshop Pro PSP images.\n  - API\n    - For plug-in and script developers, a few new public APIs were\n      backported to GIMP 3.0.8. gimp_cairo_surface_get_buffer ()\n      allows you to retrieve a GEGL buffer from a Cairo surface\n      (such as a text layer). Note that this deprecates\n      gimp_cairo_surface_create_buffer ().\n    - gimp_config_set_xcf_version () and\n      gimp_config_get_xcf_version () can be used to specify a\n      particular XCF version for a configuration. This will allow\n      you to have that data serialized/deserialized for certain\n      versions of GIMP if there were differences (such as the Grid\n      colors mentioned above).\n    - Fixes were made for retrieving image metadata via scripting.\n      GimpMetadata is now a visible child of GExiv2Metadata, so you\n      can use standard gexiv2 functions to retrieve information\n      from it.\n    - Original thumbnail metadata is also now removed on export to\n      prevent potential issues when exporting into a new format.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-packagehub-106",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-ru-2026_20168-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1255293",
        "url": "https://bugzilla.suse.com/1255293"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1255294",
        "url": "https://bugzilla.suse.com/1255294"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1255295",
        "url": "https://bugzilla.suse.com/1255295"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1255296",
        "url": "https://bugzilla.suse.com/1255296"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1255766",
        "url": "https://bugzilla.suse.com/1255766"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-14422 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-14422/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-14423 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-14423/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-14424 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-14424/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-14425 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-14425/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-15059 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-15059/"
      }
    ],
    "title": "Recommended update for gimp",
    "tracking": {
      "current_release_date": "2026-02-03T18:05:40Z",
      "generator": {
        "date": "2026-02-03T18:05:40Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-RU-2026:20168-1",
      "initial_release_date": "2026-02-03T18:05:40Z",
      "revision_history": [
        {
          "date": "2026-02-03T18:05:40Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-3.0.8-bp160.1.1.aarch64",
                "product": {
                  "name": "gimp-3.0.8-bp160.1.1.aarch64",
                  "product_id": "gimp-3.0.8-bp160.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "gimp-devel-3.0.8-bp160.1.1.aarch64",
                "product": {
                  "name": "gimp-devel-3.0.8-bp160.1.1.aarch64",
                  "product_id": "gimp-devel-3.0.8-bp160.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
                "product": {
                  "name": "gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
                  "product_id": "gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
                "product": {
                  "name": "gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
                  "product_id": "gimp-plugin-aa-3.0.8-bp160.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
                "product": {
                  "name": "gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
                  "product_id": "gimp-plugin-python3-3.0.8-bp160.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "gimp-vala-3.0.8-bp160.1.1.aarch64",
                "product": {
                  "name": "gimp-vala-3.0.8-bp160.1.1.aarch64",
                  "product_id": "gimp-vala-3.0.8-bp160.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
                "product": {
                  "name": "libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
                  "product_id": "libgimp-3_0-0-3.0.8-bp160.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
                "product": {
                  "name": "libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
                  "product_id": "libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-lang-3.0.8-bp160.1.1.noarch",
                "product": {
                  "name": "gimp-lang-3.0.8-bp160.1.1.noarch",
                  "product_id": "gimp-lang-3.0.8-bp160.1.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-3.0.8-bp160.1.1.ppc64le",
                "product": {
                  "name": "gimp-3.0.8-bp160.1.1.ppc64le",
                  "product_id": "gimp-3.0.8-bp160.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "gimp-devel-3.0.8-bp160.1.1.ppc64le",
                "product": {
                  "name": "gimp-devel-3.0.8-bp160.1.1.ppc64le",
                  "product_id": "gimp-devel-3.0.8-bp160.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
                "product": {
                  "name": "gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
                  "product_id": "gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
                "product": {
                  "name": "gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
                  "product_id": "gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
                "product": {
                  "name": "gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
                  "product_id": "gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "gimp-vala-3.0.8-bp160.1.1.ppc64le",
                "product": {
                  "name": "gimp-vala-3.0.8-bp160.1.1.ppc64le",
                  "product_id": "gimp-vala-3.0.8-bp160.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
                "product": {
                  "name": "libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
                  "product_id": "libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
                "product": {
                  "name": "libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
                  "product_id": "libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-3.0.8-bp160.1.1.x86_64",
                "product": {
                  "name": "gimp-3.0.8-bp160.1.1.x86_64",
                  "product_id": "gimp-3.0.8-bp160.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "gimp-devel-3.0.8-bp160.1.1.x86_64",
                "product": {
                  "name": "gimp-devel-3.0.8-bp160.1.1.x86_64",
                  "product_id": "gimp-devel-3.0.8-bp160.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
                "product": {
                  "name": "gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
                  "product_id": "gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
                "product": {
                  "name": "gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
                  "product_id": "gimp-plugin-aa-3.0.8-bp160.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
                "product": {
                  "name": "gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
                  "product_id": "gimp-plugin-python3-3.0.8-bp160.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "gimp-vala-3.0.8-bp160.1.1.x86_64",
                "product": {
                  "name": "gimp-vala-3.0.8-bp160.1.1.x86_64",
                  "product_id": "gimp-vala-3.0.8-bp160.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
                "product": {
                  "name": "libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
                  "product_id": "libgimp-3_0-0-3.0.8-bp160.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64",
                "product": {
                  "name": "libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64",
                  "product_id": "libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-3.0.8-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64"
        },
        "product_reference": "gimp-3.0.8-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-3.0.8-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le"
        },
        "product_reference": "gimp-3.0.8-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-3.0.8-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64"
        },
        "product_reference": "gimp-3.0.8-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-devel-3.0.8-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64"
        },
        "product_reference": "gimp-devel-3.0.8-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-devel-3.0.8-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le"
        },
        "product_reference": "gimp-devel-3.0.8-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-devel-3.0.8-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64"
        },
        "product_reference": "gimp-devel-3.0.8-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64"
        },
        "product_reference": "gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le"
        },
        "product_reference": "gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64"
        },
        "product_reference": "gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-lang-3.0.8-bp160.1.1.noarch as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch"
        },
        "product_reference": "gimp-lang-3.0.8-bp160.1.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-plugin-aa-3.0.8-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64"
        },
        "product_reference": "gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le"
        },
        "product_reference": "gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-plugin-aa-3.0.8-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64"
        },
        "product_reference": "gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-plugin-python3-3.0.8-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64"
        },
        "product_reference": "gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le"
        },
        "product_reference": "gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-plugin-python3-3.0.8-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64"
        },
        "product_reference": "gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-vala-3.0.8-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64"
        },
        "product_reference": "gimp-vala-3.0.8-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-vala-3.0.8-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le"
        },
        "product_reference": "gimp-vala-3.0.8-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-vala-3.0.8-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64"
        },
        "product_reference": "gimp-vala-3.0.8-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgimp-3_0-0-3.0.8-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64"
        },
        "product_reference": "libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le"
        },
        "product_reference": "libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgimp-3_0-0-3.0.8-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64"
        },
        "product_reference": "libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64"
        },
        "product_reference": "libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le"
        },
        "product_reference": "libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
        },
        "product_reference": "libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-14422",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-14422"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PNM files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28273.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch",
          "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-14422",
          "url": "https://www.suse.com/security/cve/CVE-2025-14422"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1255293 for CVE-2025-14422",
          "url": "https://bugzilla.suse.com/1255293"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-03T18:05:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-14422"
    },
    {
      "cve": "CVE-2025-14423",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-14423"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of LBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28311.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch",
          "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-14423",
          "url": "https://www.suse.com/security/cve/CVE-2025-14423"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1255294 for CVE-2025-14423",
          "url": "https://bugzilla.suse.com/1255294"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-03T18:05:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-14423"
    },
    {
      "cve": "CVE-2025-14424",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-14424"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GIMP XCF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of XCF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28376.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch",
          "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-14424",
          "url": "https://www.suse.com/security/cve/CVE-2025-14424"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1255295 for CVE-2025-14424",
          "url": "https://bugzilla.suse.com/1255295"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-03T18:05:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-14424"
    },
    {
      "cve": "CVE-2025-14425",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-14425"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of JP2 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28248.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch",
          "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-14425",
          "url": "https://www.suse.com/security/cve/CVE-2025-14425"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1255296 for CVE-2025-14425",
          "url": "https://bugzilla.suse.com/1255296"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-03T18:05:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-14425"
    },
    {
      "cve": "CVE-2025-15059",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-15059"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28232.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch",
          "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-15059",
          "url": "https://www.suse.com/security/cve/CVE-2025-15059"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1255766 for CVE-2025-15059",
          "url": "https://bugzilla.suse.com/1255766"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-devel-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-extension-goat-excercises-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-lang-3.0.8-bp160.1.1.noarch",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-aa-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-plugin-python3-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:gimp-vala-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimp-3_0-0-3.0.8-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libgimpui-3_0-0-3.0.8-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-03T18:05:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-15059"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.