Red Hat Security Advisory

RHSA-2026:84744

gimp:2.8 security update

Released 2026-10-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) gimp-2:2.8.22-26.module+el8.10.0+25091+9b86bd7c.9.aarch64::gimp:2.8, gimp-2:2.8.22-26.module+el8.10.0+25091+9b86bd7c.9.ppc64le::gimp:2.8, gimp-2:2.8.22-26.module+el8.10.0+25091+9b86bd7c.9.s390x::gimp:2.8 +47

Fixes 4 records

TI-2026-63963 CVE-2026-97185 · GHSA-wp8m-4297-94hv

Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file

LOW 35

A flaw was found in GIMP.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00133 Published 2026-09-24 Partial fix · 8100020261015094823.4c9c024f, 2:3.0.4-4.el9_8.14 +1 CWE-787

TI-2026-62277 CVE-2026-92248 · GHSA-v7fc-wcg3-84gx

Gimp: integer overflow when generating a thumbnail preview for a psd file

LOW 35

A flaw was found in the file-psd plugin in GIMP.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00187 Published 2026-09-15 Partial fix · 8100020261015094823.4c9c024f, 2:3.0.4-4.el9_8.14 +1 CWE-190

TI-2026-61812 CVE-2026-90948 · GHSA-4gcm-x544-rhh4

Gimp: gimp: heap-based buffer overflow in ico loader via integer overflow in embedded png dimensions

LOW 35

A flaw was found in GIMP's ICO file loader.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00228 Published 2026-09-14 Partial fix · 8100020261015094823.4c9c024f, 2:3.0.4-4.el9_8.14 +1 CWE-787

TI-2026-61811 CVE-2026-90947 · GHSA-pcjr-j975-j4c4

Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file

LOW 35

A flaw was found in GIMP.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00133 Published 2026-09-14 Partial fix · 8100020261015094823.4c9c024f, 2:3.0.4-4.el9_8.14 +1 CWE-787