Red Hat Security Advisory

RHSA-2025:9501

gimp security update

Released 2025-06-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) gimp-2:2.8.22-1.el7_9.2, gimp-libs-2:2.8.22-1.el7_9.2
Red Hat Enterprise Linux Server Optional (v. 7 ELS) gimp-2:2.8.22-1.el7_9.2, gimp-devel-2:2.8.22-1.el7_9.2, gimp-devel-tools-2:2.8.22-1.el7_9.2 +1

TI-2025-04914 CVE-2025-5473 · GHSA-23w7-3gw5-5jqr

MEDIUM 61

GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.25043 Published 2025-06-06 Partial fix CWE-190

TI-2025-30986 CVE-2025-48798 · GHSA-7p2h-v67m-x5qx

LOW 34

A flaw was found in GIMP when processing XCF image files.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00247 Published 2025-05-27 Partial fix · 3.0.0, 2:2.8.22-1.el7_9.2 +9 CWE-416

TI-2025-30985 CVE-2025-48797 · GHSA-hrhw-58x6-vqj7

LOW 34

A flaw was found in GIMP when processing certain TGA image files.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00281 Published 2025-05-27 Partial fix · 3.0.0, 2:2.8.22-1.el7_9.2 +9 CWE-122