Red Hat Security Advisory

RHSA-2026:26168

gimp security update

Released 2026-06-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) gimp-2:2.8.22-1.el7_9.6, gimp-libs-2:2.8.22-1.el7_9.6
Red Hat Enterprise Linux Server Optional (v. 7 ELS) gimp-2:2.8.22-1.el7_9.6, gimp-devel-2:2.8.22-1.el7_9.6, gimp-devel-2:2.8.22-1.el7_9.6.ppc +3

Fixes 4 records

TI-2026-03602 CVE-2026-4154 · GHSA-7cp2-q9fg-jpv9

Integer overflow in GIMP

LOW 37

GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00596 Published 2026-04-11 Partial fix CWE-190

TI-2026-03601 CVE-2026-4153 · GHSA-rr9p-8245-3f99

Heap-based buffer overflow in GIMP

LOW 37

GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00638 Published 2026-04-11 Partial fix CWE-122

TI-2026-03598 CVE-2026-4150 · GHSA-wgjm-63ch-mwj3

Integer overflow in GIMP

LOW 37

GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0074 Published 2026-04-11 Partial fix CWE-190

TI-2026-04259 CVE-2026-4887 · GHSA-wmqx-rmqw-vxp8

Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image

LOW 32

A flaw was found in GIMP.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00645 Published 2026-03-26 Partial fix · 2:2.8.22-1.el7_9.6, 8100020260512115927.4c9c024f +9 CWE-193