{"id":"CVE-2026-58381","aliases":["CLSA-2026-1791295129","CLSA-2026-1791296305","DEBIAN-CVE-2026-58381","EUVD-2026-41434","GHSA-pfjw-r4vx-pmfw","OESA-2026-2880","OESA-2026-2882","SUSE-SU-2026:3399-1","UBUNTU-CVE-2026-58381","openSUSE-SU-2026:21359-1"],"status":"published","title":"Gimp: gimp: double-free in read_layer_block()","description":"A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00289,"percentile":0.21599,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-415"],"published":"2026-07-02T19:45:33Z","modified":"2026-11-06T10:04:41Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp","fixed_in":["2:2.99.8-4.el9.2.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-devel","fixed_in":["2:2.99.8-4.el9.2.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-devel-tools","fixed_in":["2:2.99.8-4.el9.2.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-libs","fixed_in":["2:2.99.8-4.el9.2.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp","fixed_in":["2:2.99.8-4.el9_6.2.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-devel","fixed_in":["2:2.99.8-4.el9_6.2.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-devel-tools","fixed_in":["2:2.99.8-4.el9_6.2.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-libs","fixed_in":["2:2.99.8-4.el9_6.2.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gimp","fixed_in":["3.0.4-3+deb13u10"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gimp","fixed_in":["3.2.4-1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"gimp","fixed_in":["3.0.2-15.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"gimp","fixed_in":["3.0.2-15.oe2403sp1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.34-1","2.10.34-1+deb12u1","2.10.34-1+deb12u10","2.10.34-1+deb12u2","2.10.34-1+deb12u3","2.10.34-1+deb12u4","2.10.34-1+deb12u5","2.10.34-1+deb12u6","2.10.34-1+deb12u7","2.10.34-1+deb12u8","2.10.34-1+deb12u9","2.10.36-1","2.10.36-2","2.10.36-3","2.10.38-1","2.10.38-2","2.99.10-1","2.99.12-1","2.99.12-2","2.99.14-1","2.99.14-2","2.99.16-1","2.99.16-2","2.99.18-1","3.0.0-1","3.0.0-2","3.0.0~RC1-1","3.0.0~RC1-3","3.0.0~RC1-4","3.0.0~RC2-1","3.0.0~RC3-1","3.0.2-1","3.0.2-2","3.0.2-3","3.0.2-3.1","3.0.4-1","3.0.4-2","3.0.4-3","3.0.4-4","3.0.4-5","3.0.4-6","3.0.4-6.1","3.0.4-6.2","3.0.6-1","3.2.0-1","3.2.0~RC2-1","3.2.0~RC2-2","3.2.0~RC2-3","3.2.0~RC2-3.1","3.2.0~RC2-3.2","3.2.0~RC2-3.3","3.2.0~RC3-1","3.2.2-1","3.2.4-1","3.2.4-2","3.2.4-3","3.2.6-1","3.2.8-1"]},{"source":"osv","ecosystem":"Debian:13","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-3+deb13u10"}]}],"versions":["3.0.4-3","3.0.4-3+deb13u1","3.0.4-3+deb13u2","3.0.4-3+deb13u3","3.0.4-3+deb13u4","3.0.4-3+deb13u5","3.0.4-3+deb13u6","3.0.4-3+deb13u7","3.0.4-3+deb13u8","3.0.4-3+deb13u9"]},{"source":"osv","ecosystem":"Debian:14","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.4-1"}]}],"versions":["3.0.4-3","3.0.4-4","3.0.4-5","3.0.4-6","3.0.4-6.1","3.0.4-6.2","3.0.6-1","3.2.0-1","3.2.0~RC2-1","3.2.0~RC2-2","3.2.0~RC2-3","3.2.0~RC2-3.1","3.2.0~RC2-3.2","3.2.0~RC2-3.3","3.2.0~RC3-1","3.2.2-1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-15.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-15.oe2403sp1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-150400.3.58.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-150400.3.58.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.14-1ubuntu2","2.8.14-1.2ubuntu1","2.8.16-1ubuntu1","2.8.16-1ubuntu1.1","2.8.16-1ubuntu1.1+esm1","2.8.16-1ubuntu1.1+esm2","2.8.16-1ubuntu1.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.20-1","2.8.20-1.1","2.8.20-2","2.8.22-1","2.8.22-1ubuntu0.1~esm1","2.8.22-1ubuntu0.1~esm2","2.8.22-1ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.8-2","2.10.14-2","2.10.14-2build1","2.10.14-2ubuntu1","2.10.14-3","2.10.18-1","2.10.18-1ubuntu0.1","2.10.18-1ubuntu0.1+esm1","2.10.18-1ubuntu0.1+esm2","2.10.18-1ubuntu0.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.24-2","2.10.28-1","2.10.30-1","2.10.30-1build1","2.10.30-1ubuntu0.1","2.10.30-1ubuntu0.1+esm1","2.10.30-1ubuntu0.1+esm2","2.10.30-1ubuntu0.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.34-1","2.10.36-1","2.10.36-2","2.10.36-3build2","2.10.36-3build3","2.10.36-3ubuntu0.24.04.1","2.10.36-3ubuntu0.24.04.1+esm1","2.10.36-3ubuntu0.24.04.1+esm2","2.10.36-3ubuntu0.24.04.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.2-1","3.0.2-2","3.0.2-3","3.0.2-3.1","3.0.4-1","3.0.4-2","3.0.4-3","3.0.4-5","3.0.4-6","3.0.4-6.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.4-6.1","3.0.4-6.2","3.0.6-1","3.2.0~RC2-2","3.2.0~RC2-3","3.2.0~RC2-3.1","3.2.0~RC2-3.2","3.2.0~RC2-3.3","3.2.0~RC3-1","3.2.0-1","3.2.2-1","3.2.2-1ubuntu0.26.04.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-bp160.5.1"}]}],"bundled":3}],"products":[{"vendor":"gimp","product":"gimp"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-58381","tags":["vdb-entry","x_refsource_REDHAT","Vendor Advisory","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2496166","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Vendor Advisory","report"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/commit/b22e147b","tags":["Patch","fix","report"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/issues/16207","tags":["Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58381","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pfjw-r4vx-pmfw"},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1791295129.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1791296305.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2271","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/58xxx/CVE-2026-58381.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-58381","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2880","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2882","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263399-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1270239","tags":["report"]},{"url":"https://bugzilla.suse.com/1270299","tags":["report"]},{"url":"https://bugzilla.suse.com/1270444","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58381","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-58381","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-58381","tags":["report"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/work_items/16207","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-58381","title":"Gimp: gimp: double-free in read_layer_block()","description":"A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.","status":"published","published":"2026-07-02T19:45:33.777Z","modified":"2026-11-05T22:17:48.735Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-415"],"updated_at":"2026-11-05T23:55:29.66083Z"}],"euvd":[{"id":"EUVD-2026-41434","description":"A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.","status":"published","published":"2026-07-02T19:45:33Z","modified":"2026-11-05T22:17:48Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-05T23:02:19.769742Z"}],"ghsa":[{"id":"GHSA-pfjw-r4vx-pmfw","title":"A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the...","description":"A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.","status":"published","published":"2026-07-02T21:32:12Z","modified":"2026-07-02T21:32:15Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T15:09:13.018027Z"}],"nvd":[{"id":"CVE-2026-58381","description":"A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.","status":"published","published":"2026-07-02T20:17:06.17Z","modified":"2026-11-05T23:16:55.077Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-415"],"updated_at":"2026-11-06T01:57:38.912201Z"}],"osv":[{"id":"CVE-2026-58381","title":"Gimp: gimp: double-free in read_layer_block()","description":"A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.","status":"published","published":"2026-07-02T19:45:33.777Z","modified":"2026-11-07T02:30:29.689536426Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium"}],"cwes":["CWE-415"],"updated_at":"2026-11-07T03:08:07.940184Z"},{"id":"DEBIAN-CVE-2026-58381","description":"A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.","status":"published","published":"2026-07-02T20:17:06.17Z","modified":"2026-11-06T10:04:41.334055526Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-06T10:38:22.758306Z"},{"id":"OESA-2026-2880","title":"gimp security update","description":"The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in GIMP\u0026apos;s PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.(CVE-2026-58381)","status":"published","published":"2026-07-09T11:11:47Z","modified":"2026-08-18T01:21:14.998229877Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2882","title":"gimp security update","description":"The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in GIMP\u0026apos;s PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.(CVE-2026-58381)","status":"published","published":"2026-07-09T11:11:47Z","modified":"2026-08-18T01:21:14.910786609Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"UBUNTU-CVE-2026-58381","description":"A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.","status":"published","published":"2026-07-02T20:17:00Z","modified":"2026-09-24T02:00:34.373125111Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:41.911783Z"},{"id":"CLSA-2026-1791295129","title":"gimp: Fix of CVE-2026-58381","description":"- CVE-2026-58381: reset the PSP layer name on each layer iteration to avoid a\n  double free","status":"published","published":"2026-10-06T13:58:59Z","modified":"2026-10-26T09:30:52.31074103Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CLSA-2026-1791296305","title":"gimp: Fix of 2 CVEs","description":"- CVE-2026-58381: reset the PSP layer name on each layer iteration to avoid a\n  double free","status":"published","published":"2026-10-06T14:18:37Z","modified":"2026-10-26T09:31:27.537912792Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"openSUSE-SU-2026:21359-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\nChanges in gimp:\n\n- CVE-2026-58379: Fix PSP File Parsing Heap Buffer Overflow (bsc#1270299)\n- CVE-2026-58380: Fix buffer overflow in pnmscanner_gettoken (bsc#1270444)\n- CVE-2026-58381: Prevent double-freeing PSP layer name (bsc#1270239)\n","status":"published","published":"2026-07-15T09:59:34Z","modified":"2026-07-17T18:24:06.831605955Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:3399-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues\n\n- CVE-2026-58379: Heap buffer overflow in read_channel_data() (bsc#1270299).\n- CVE-2026-58380: Stack buffer overflow in pnmscanner_gettoken() (bsc#1270444).\n- CVE-2026-58381: double-free in read_layer_block() (bsc#1270239).\n","status":"published","published":"2026-07-29T07:44:50Z","modified":"2026-07-30T17:15:10.473370462Z","updated_at":"2026-11-02T15:54:04.987808Z"}]}}