Red Hat Security AdvisoryRHSA-2026:0356
gimp:2.8 security update
Released 2026-01-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) gimp-2:2.8.22-18.module+el8.6.0+23748+f275078b.3.src::gimp:2.8, gimp-2:2.8.22-18.module+el8.6.0+23748+f275078b.3.x86_64::gimp:2.8, gimp-devel-2:2.8.22-18.module+el8.6.0+23748+f275078b.3.x86_64::gimp:2.8 +15
- Red Hat Enterprise Linux AppStream E4S (v.8.6) gimp-2:2.8.22-18.module+el8.6.0+23748+f275078b.3.aarch64::gimp:2.8, gimp-2:2.8.22-18.module+el8.6.0+23748+f275078b.3.ppc64le::gimp:2.8, gimp-2:2.8.22-18.module+el8.6.0+23748+f275078b.3.s390x::gimp:2.8 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.6) gimp-2:2.8.22-18.module+el8.6.0+23748+f275078b.3.src::gimp:2.8, gimp-2:2.8.22-18.module+el8.6.0+23748+f275078b.3.x86_64::gimp:2.8, gimp-devel-2:2.8.22-18.module+el8.6.0+23748+f275078b.3.x86_64::gimp:2.8 +15
Fixes 2 records
Priority LOW 38
GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.0083 · Published 2025-10-29 · Partial fix CWE-122
Priority LOW 37
GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00582 · Published 2025-10-29 · Partial fix CWE-122