openSUSE GIMP Important Code Exec Denial of Service 2026-3688

Find practical guidance for preventing, investigating, and responding to Linux security problems. Review Linux Privileges ×

This update for gimp fixes the following issues:

* CVE-2026-59088: GIMP: Denial of service via signed integer overflow in FLI

file processing (bsc#1274837).

* CVE-2026-59090: GIMP: Arbitrary code execution in PSD plugin due to unsigned

underflow (bsc#1274840).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch SUSE-2026-3688=1

* SUSE Package Hub 15 15-SP7

zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-3688=1

* SUSE Linux Enterprise Workstation Extension 15 SP7

zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-3688=1

* SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x)

* libgimp-2_0-0-debuginfo-2.10.30-150400.3.61.1

* gimp-debugsource-2.10.30-150400.3.61.1

* gimp-debuginfo-2.10.30-150400.3.61.1

* libgimpui-2_0-0-2.10.30-150400.3.61.1

* libgimp-2_0-0-2.10.30-150400.3.61.1

* libgimpui-2_0-0-debuginfo-2.10.30-150400.3.61.1

* SUSE Package Hub 15 15-SP7 (aarch64)

* gimp-devel-2.10.30-150400.3.61.1

* gimp-2.10.30-150400.3.61.1

* gimp-plugin-aa-debuginfo-2.10.30-150400.3.61.1

* gimp-devel-debuginfo-2.10.30-150400.3.61.1

* gimp-plugin-aa-2.10.30-150400.3.61.1

* SUSE Package Hub 15 15-SP7 (noarch)

* gimp-lang-2.10.30-150400.3.61.1

* openSUSE Leap 15.4 (aarch64_ilp32)

* libgimpui-2_0-0-64bit-2.10.30-150400.3.61.1

* libgimp-2_0-0-64bit-2.10.30-150400.3.61.1

* libgimpui-2_0-0-64bit-debuginfo-2.10.30-150400.3.61.1

* libgimp-2_0-0-64bit-debuginfo-2.10.30-150400.3.61.1

* openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64)

* libgimp-2_0-0-debuginfo-2.10.30-150400.3.61.1

* gimp-debugsource-2.10.30-150400.3.61.1

*

*

*

*

Get the latest Linux and open source security news straight to your inbox.