Red Hat Security AdvisoryRHSA-2026:61587
gimp security update
Released 2026-08-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) gimp-2:3.0.4-4.el9_8.10, gimp-libs-2:3.0.4-4.el9_8.10
Fixes 9 records
Priority HIGH 76
A flaw was found in GIMP's PSD file format plugin.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.0076 · Published 2026-08-10 · Partial fix · 2:3.0.4-4.el9_8.10, 2:2.99.8-4.el9_2.7 +2 CWE-191
Priority LOW 36
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00339 · Published 2026-08-20 · Partial fix CWE-190
Priority LOW 36
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00423 · Published 2026-08-20 · Partial fix CWE-122
Priority LOW 36
GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00339 · Published 2026-08-20 · Partial fix CWE-190
Priority LOW 36
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00359 · Published 2026-08-20 · Partial fix CWE-190
Priority LOW 36
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00359 · Published 2026-08-20 · Partial fix CWE-190
Priority LOW 36
GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00389 · Published 2026-08-20 · Partial fix CWE-121
Priority LOW 36
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00389 · Published 2026-08-20 · Partial fix CWE-122
Priority LOW 36
GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00339 · Published 2026-08-20 · Partial fix CWE-190