{"schema_version":"1.7.2","id":"OESA-2026-3414","modified":"2026-08-20T09:54:58Z","published":"2026-08-20T09:54:58Z","upstream":["CVE-2026-42169"],"summary":"gimp security update","details":"The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute.\r\n\r\nSecurity Fix(es):\n\nA vulnerability classified as critical has been found in GIMP (Image Processing Software) (unknown version).CWE is classifying the issue as CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().This is going to have an impact on confidentiality, integrity, and availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2026-42169)","affected":[{"package":{"ecosystem":"openEuler:24.03-LTS-SP3","name":"gimp","purl":"pkg:rpm/openEuler/gimp&distro=openEuler-24.03-LTS-SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-19.oe2403sp3"}]}],"ecosystem_specific":{"aarch64":["gimp-3.0.2-19.oe2403sp3.aarch64.rpm","gimp-debuginfo-3.0.2-19.oe2403sp3.aarch64.rpm","gimp-debugsource-3.0.2-19.oe2403sp3.aarch64.rpm","gimp-devel-3.0.2-19.oe2403sp3.aarch64.rpm","gimp-extension-goat-excercises-3.0.2-19.oe2403sp3.aarch64.rpm","gimp-libs-3.0.2-19.oe2403sp3.aarch64.rpm","gimp-plugin-aa-3.0.2-19.oe2403sp3.aarch64.rpm","gimp-plugin-python3-3.0.2-19.oe2403sp3.aarch64.rpm","gimp-vala-3.0.2-19.oe2403sp3.aarch64.rpm"],"src":["gimp-3.0.2-19.oe2403sp3.src.rpm"],"x86_64":["gimp-3.0.2-19.oe2403sp3.x86_64.rpm","gimp-debuginfo-3.0.2-19.oe2403sp3.x86_64.rpm","gimp-debugsource-3.0.2-19.oe2403sp3.x86_64.rpm","gimp-devel-3.0.2-19.oe2403sp3.x86_64.rpm","gimp-extension-goat-excercises-3.0.2-19.oe2403sp3.x86_64.rpm","gimp-libs-3.0.2-19.oe2403sp3.x86_64.rpm","gimp-plugin-aa-3.0.2-19.oe2403sp3.x86_64.rpm","gimp-plugin-python3-3.0.2-19.oe2403sp3.x86_64.rpm","gimp-vala-3.0.2-19.oe2403sp3.x86_64.rpm"]}}],"references":[{"type":"ADVISORY","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3414"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42169"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"}],"database_specific":{"severity":"High"}}