Red Hat Security AdvisoryRHSA-2026:20554
gimp:2.8 security update
Released 2026-05-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.8.8) gimp-2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7.ppc64le::gimp:2.8, gimp-2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7.src::gimp:2.8, gimp-2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7.x86_64::gimp:2.8 +28
- Red Hat Enterprise Linux AppStream TUS (v.8.8) gimp-2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7.src::gimp:2.8, gimp-2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7.x86_64::gimp:2.8, gimp-devel-2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7.x86_64::gimp:2.8 +15
Fixes 4 records
Priority LOW 37
GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00596 · Published 2026-04-11 · Partial fix CWE-190
Priority LOW 37
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00638 · Published 2026-04-11 · Partial fix CWE-122
Priority LOW 37
GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.0074 · Published 2026-04-11 · Partial fix CWE-190
Priority LOW 32
A flaw was found in GIMP.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00645 · Published 2026-03-26 · Partial fix · 2:2.8.22-1.el7_9.6, 8100020260512115927.4c9c024f +9 CWE-193