Red Hat Security AdvisoryRHSA-2026:62507
gimp:2.8 security update
Released 2026-09-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) gimp-2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8.aarch64::gimp:2.8, gimp-2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8.ppc64le::gimp:2.8, gimp-2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8.s390x::gimp:2.8 +47
Fixes 8 records
Priority LOW 36
A flaw was found in the file-fits plugin in GIMP.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00296 · Published 2026-07-27 · Partial fix · 8100020260824165450.4c9c024f, 2:3.0.4-4.el9_8.9 +3 CWE-190
Priority LOW 36
A flaw was found in GIMP's PNM file format parser.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00318 · Published 2026-07-06 · Partial fix · 8100020260824165450.4c9c024f, 2:3.0.4-4.el9_8.7 +3 CWE-193
Priority LOW 36
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00423 · Published 2026-08-20 · Partial fix CWE-122
Priority LOW 36
GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00339 · Published 2026-08-20 · Partial fix CWE-190
Priority LOW 36
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00359 · Published 2026-08-20 · Partial fix CWE-190
Priority LOW 36
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00359 · Published 2026-08-20 · Partial fix CWE-190
Priority LOW 36
GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00389 · Published 2026-08-20 · Partial fix CWE-121
Priority LOW 36
GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00339 · Published 2026-08-20 · Partial fix CWE-190