https://gitlab.gnome.org/GNOME/gimp/-/commit/c17b324910204a47828d6fbb542bdcefbd66bcc1 applies cleanly on 3.0.4. Please consider importing it as a quilt patch.
- Bug#1107758: gimp: CVE-2025-2760 Salvatore Bonaccorso
- Bug#1107758: gimp: CVE-2025-2760 Bastian Germann