Threats affecting pkg:rpm/suse/gimp

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.3	EPSS 0.5%	CVE-2026-58379SUSE gimp · Security update for gimp High7.3EPSS 0.5%2026-07-15GCVE DatabaseCVE-2026-58379 This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-58379: Fix PSP File Parsing Heap Buffer Overflow (bsc#1270299) - CVE-2026-58380: Fix buffer overflow in pnmscanner_gettoken (bsc#1270444) - CVE-2026-58381: Prevent double-freeing PSP layer name (bsc#1270239) EPSS 0.5%Report on CVE-2026-58379 Vulnerability SUSE Product Security Team	GCVE Database	2026-07-15
Low	2.8	EPSS 0.5%	CVE-2026-2239SUSE gimp · Security update for gimp Low2.8EPSS 0.5%2026-02-25GCVE DatabaseCVE-2026-2239 A security update for GIMP addresses a heap buffer overflow vulnerability identified as CVE-2026-2239 in the psd-util.c component. This flaw could potentially lead to memory corruption. The issue has been fixed in the update provided by the SUSE Product Security Team. No CVSS score is available, but the severity is assessed as low based on the information provided. EPSS 0.5%Report on CVE-2026-2239 Vulnerability SUSE Product Security Team	GCVE Database	2026-02-25

Page 1 of 1