Red Hat Security Advisory

RHSA-2025:9309

gimp:2.8 security update

Released 2025-06-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) gimp-2:2.8.22-18.module+el8.6.0+23301+adfde0c1.2.src::gimp:2.8, gimp-2:2.8.22-18.module+el8.6.0+23301+adfde0c1.2.x86_64::gimp:2.8, gimp-devel-2:2.8.22-18.module+el8.6.0+23301+adfde0c1.2.x86_64::gimp:2.8 +15
Red Hat Enterprise Linux AppStream E4S (v.8.6) gimp-2:2.8.22-18.module+el8.6.0+23301+adfde0c1.2.aarch64::gimp:2.8, gimp-2:2.8.22-18.module+el8.6.0+23301+adfde0c1.2.ppc64le::gimp:2.8, gimp-2:2.8.22-18.module+el8.6.0+23301+adfde0c1.2.s390x::gimp:2.8 +47
Red Hat Enterprise Linux AppStream TUS (v.8.6) gimp-2:2.8.22-18.module+el8.6.0+23301+adfde0c1.2.src::gimp:2.8, gimp-2:2.8.22-18.module+el8.6.0+23301+adfde0c1.2.x86_64::gimp:2.8, gimp-devel-2:2.8.22-18.module+el8.6.0+23301+adfde0c1.2.x86_64::gimp:2.8 +15

TI-2025-04914 CVE-2025-5473 · GHSA-23w7-3gw5-5jqr

MEDIUM 61

GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.25043 Published 2025-06-06 Partial fix CWE-190

TI-2025-30986 CVE-2025-48798 · GHSA-7p2h-v67m-x5qx

LOW 34

A flaw was found in GIMP when processing XCF image files.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00247 Published 2025-05-27 Partial fix · 3.0.0, 2:2.8.22-1.el7_9.2 +9 CWE-416

TI-2025-30985 CVE-2025-48797 · GHSA-hrhw-58x6-vqj7

LOW 34

A flaw was found in GIMP when processing certain TGA image files.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00281 Published 2025-05-27 Partial fix · 3.0.0, 2:2.8.22-1.el7_9.2 +9 CWE-122