{
  "schema_version": "1.7.0",
  "id": "MGASA-2026-0578",
  "published": "2026-11-07T04:34:18Z",
  "modified": "2026-11-07T04:12:58Z",
  "summary": "Updated gimp packages fix security vulnerabilities",
  "details": "This update to v. 3.2.8 fixes several security issues.\n",
  "upstream": [
    "CVE-2026-18301",
    "CVE-2026-18302",
    "CVE-2026-18306",
    "CVE-2026-18309",
    "CVE-2026-58379",
    "CVE-2026-59087",
    "CVE-2026-59088",
    "CVE-2026-59089",
    "CVE-2026-59090",
    "CVE-2026-59091",
    "CVE-2026-66757",
    "CVE-2026-66758",
    "CVE-2026-66759",
    "CVE-2026-78465",
    "CVE-2026-78475",
    "CVE-2026-79902",
    "CVE-2026-80101",
    "CVE-2026-82328",
    "CVE-2026-82330",
    "CVE-2026-90947",
    "CVE-2026-90948",
    "CVE-2026-90949",
    "CVE-2026-92248",
    "CVE-2026-96543",
    "CVE-2026-96544",
    "CVE-2026-96545",
    "CVE-2026-96546",
    "CVE-2026-97185"
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://advisories.mageia.org/MGASA-2026-0578.html"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.mageia.org/show_bug.cgi?id=36194"
    },
    {
      "type": "WEB",
      "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LUXP5VNBOZ64AC65YKLO3MBCA4XXR3YS/"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-security-announce/2026/msg00381.html"
    },
    {
      "type": "WEB",
      "url": "https://www.gimp.org/news/2026/09/10/gimp-3-2-6-released/"
    },
    {
      "type": "WEB",
      "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/AXAWJZC67JFATQTC4ZYX23XZMXR7SZXO/"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-security-announce/2026/msg00421.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/C7EXHOBQOGSI72FUDZQDNV4DYSYL6PXM/"
    },
    {
      "type": "WEB",
      "url": "https://www.gimp.org/news/2026/11/02/gimp-3-2-8-released/"
    }
  ],
  "affected": [
    {
      "package": {
        "ecosystem": "Mageia:10",
        "name": "gimp",
        "purl": "pkg:rpm/mageia/gimp?arch=source&distro=mageia-10"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.2.8-1.mga10"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    }
  ],
  "credits": [
    {
      "name": "Mageia",
      "type": "COORDINATOR",
      "contact": [
        "https://wiki.mageia.org/en/Packages_Security_Team"
      ]
    }
  ]
}
