[ALSA-2026:62507] Important: gimp:2.8 security update
Type:
security
Severity:
important
Release date:
2026-09-02
Description:
The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: gimp: Stack buffer overflow in pnmscanner_gettoken() (CVE-2026-58380) * gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images (CVE-2026-66758) * gimp: GIMP: Arbitrary code execution via crafted TIF file parsing (CVE-2026-18304) * gimp: GIMP: Remote code execution via PSD file parsing integer overflow (CVE-2026-18301) * gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow (CVE-2026-18305) * gimp: GIMP: Remote code execution via TIF file parsing vulnerability (CVE-2026-18303) * gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow (CVE-2026-18306) * gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18307) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 gimp-devel-2.8.22-26.module_el8.10.0+4267+35168c80.8.aarch64.rpm 2ca3cabff330549daf37f6b461581c79226cb30226d36b3d0135281e6667ba63
aarch64 gimp-devel-tools-2.8.22-26.module_el8.10.0+4267+35168c80.8.aarch64.rpm 310252ef9d27ffada16fb2e822fd0f003f028f7ffec20d9bdba8e505e848c593
aarch64 pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.aarch64.rpm 3b2ffb23dc24e83e10c83f4ccc075cc103fd56a2764b58524a1935394872ac76
aarch64 python2-cairo-devel-1.16.3-7.module_el8.10.0+4267+35168c80.aarch64.rpm 447ac1bd4a54e2dfe2135ada69c94b6a8189c27a0306265f33888546262a47d0
aarch64 pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.aarch64.rpm 540e9dde16c8fa7c18f9542b838001305955750fe85125fcd97ba750289b5cb0
aarch64 pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.aarch64.rpm 6ef991da497a0c4d97d896c8f26b8eace58ac5c5a2ca40c2f000ee3a0b016851
aarch64 pygobject2-doc-2.28.7-5.module_el8.10.0+4267+35168c80.aarch64.rpm 710f57fd69e08f6368800d8216f6975f5929ed4b19530302bfe29280c3c727d6
aarch64 pygobject2-2.28.7-5.module_el8.10.0+4267+35168c80.aarch64.rpm 74e209bee806b69cc54fc3d73ff1a9f172e37c4af1f9fef694c08057b3b9e833
aarch64 pygobject2-codegen-2.28.7-5.module_el8.10.0+4267+35168c80.aarch64.rpm 90381330f30e95ac33d677684ef3305609a0dde8b0c3ba0577677b70a269fb81
aarch64 pygobject2-devel-2.28.7-5.module_el8.10.0+4267+35168c80.aarch64.rpm 905cadcdc1a64616108e9255d91d8e5fa303c4ac2604ed5af91aad00cc004314
aarch64 python2-cairo-1.16.3-7.module_el8.10.0+4267+35168c80.aarch64.rpm 980ee5c3b2edd733c1917eb43e7feeed91bee062c913bac06a14c3f08ec0a39a
aarch64 gimp-libs-2.8.22-26.module_el8.10.0+4267+35168c80.8.aarch64.rpm c8e91e247085d3ffca721024adc804cda5eeeb06355f46230514c2dc448ea6f9
aarch64 gimp-2.8.22-26.module_el8.10.0+4267+35168c80.8.aarch64.rpm ccd8d2ac106ed58c6233aba9f5026cb747d7c65a06eaee5f678d334277d59a93
noarch pygtk2-doc-2.24.0-25.module_el8.9.0+3725+d1441900.noarch.rpm bec32577bca5233d67a34af1ef0ae0d1ca15f8896607b22d94cc18d8d4c93d70
ppc64le pygobject2-devel-2.28.7-5.module_el8.10.0+4267+35168c80.ppc64le.rpm 068adc70a80ab7ada50f8dc6263ae80c4ddae9175e668e8fb8d5511ac5539f74
ppc64le pygobject2-2.28.7-5.module_el8.10.0+4267+35168c80.ppc64le.rpm 259ccd30531b45fe407054614f9a169f29510214701b3b30be78a2dca320c517
ppc64le pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.ppc64le.rpm 400bfe9b8ecc094297226eeab20bf88f02344beb51ec20496ddd8cfe6d138b0e
ppc64le gimp-libs-2.8.22-26.module_el8.10.0+4267+35168c80.8.ppc64le.rpm 441dd2d7a5d3e2d28f2e363c76134059717521b67a0ee3f2e7d81b5488d932cb
ppc64le python2-cairo-1.16.3-7.module_el8.10.0+4267+35168c80.ppc64le.rpm 50a023b50c7582b0b98b2003501d95c15cdbe85e2fecc6ac934ad7272d48cd36
ppc64le pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.ppc64le.rpm 50de78cdd9a7eb9d765416ef8b6025d0212b9f400834b8309ebacedc54f59186
ppc64le pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.ppc64le.rpm 6ffbf1d5a9ac7e89910005c28ad62626a281d20ff5b3c2b7d192e996eaedff85
ppc64le python2-cairo-devel-1.16.3-7.module_el8.10.0+4267+35168c80.ppc64le.rpm 83f99b5a696dd03da36e5f26f99ac371daf198518ccdf2af1b27e5e7493838fe
ppc64le gimp-2.8.22-26.module_el8.10.0+4267+35168c80.8.ppc64le.rpm bf4f3a819e934a8c71644238b9f08aaf4f0ed89522fd00a37d4e54432088d033
ppc64le gimp-devel-2.8.22-26.module_el8.10.0+4267+35168c80.8.ppc64le.rpm ce3e0f2a41b6eb93fa7a1ed705247e1e04d7be11de52ee587ed68c0ae90594a0
ppc64le pygobject2-codegen-2.28.7-5.module_el8.10.0+4267+35168c80.ppc64le.rpm d6402a4ecdbde7268b0d20c180c11b9f2e0bad8d4cc43fc3577eaf0c5d9cddd4
ppc64le gimp-devel-tools-2.8.22-26.module_el8.10.0+4267+35168c80.8.ppc64le.rpm f64e7deb6cfea67d6a7dc207b3cf82edd1acb8c38382bc52bdabdd08a4268414
ppc64le pygobject2-doc-2.28.7-5.module_el8.10.0+4267+35168c80.ppc64le.rpm f97a305654b1e87ac374b3334ecfda6b51a39b3f88cdcae9d1d00dfd9bb468e7
s390x pygobject2-codegen-2.28.7-5.module_el8.10.0+4267+35168c80.s390x.rpm 11729e0bcf1a278528b101341c86d3ce8b31ec464dd039e8813ac55b62e939b1
s390x pygobject2-doc-2.28.7-5.module_el8.10.0+4267+35168c80.s390x.rpm 353dfd049d13f710bd8624f2bb731074e8e124010ea9f350968ca51d7a2a8729
s390x pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm 42ea8b58abfff83cebc7a09a7f6f264b168a95782decbb03b4fcfef37fd7c062
s390x pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm 43c790ef899908821a64cfad4af33097d1a9d9351a75d63d45e4363e0d91eec8
s390x gimp-devel-tools-2.8.22-26.module_el8.10.0+4267+35168c80.8.s390x.rpm 45ecf27686581852c053d0c4232f9286b50c4dee9c4f62bf5017eb8e7002d2b2
s390x pygobject2-devel-2.28.7-5.module_el8.10.0+4267+35168c80.s390x.rpm 47879979bbab07718b59e7b15265b296715aefd14849daba59fc714105e8e4ef
s390x pygobject2-2.28.7-5.module_el8.10.0+4267+35168c80.s390x.rpm 76242a5247dbb2e6e543a40378b3da021bdf4b034bf2d819f1ee171c89219d67
s390x pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm 91402fea22feef9d15400358a93ae5d2ff0b95b332edfbae2245ac5846848476
s390x python2-cairo-1.16.3-7.module_el8.10.0+4267+35168c80.s390x.rpm 91bd4eadb7e4cee30ed68b34c252e3d4a326797a2fb8f52ac2cddf02330c327a
s390x gimp-2.8.22-26.module_el8.10.0+4267+35168c80.8.s390x.rpm 95b10f5824092ba36593612711323e4bc4b8b9dafe685b031dcd17817f4014af
s390x gimp-devel-2.8.22-26.module_el8.10.0+4267+35168c80.8.s390x.rpm 961a3ca024afb84fb1c0b4926e8864a4fd39e42ffc5467cc04622b7cfcaa242c
s390x python2-cairo-devel-1.16.3-7.module_el8.10.0+4267+35168c80.s390x.rpm aadb5ef8932d11252005fa085b311366caa7f19510beb63f8d9ad96dfe8e6420
s390x gimp-libs-2.8.22-26.module_el8.10.0+4267+35168c80.8.s390x.rpm f9066284d695e1ae05c6515498a8d1cdeb821bc1d8837b83abcf28e0bd889d87
x86_64 gimp-devel-tools-2.8.22-26.module_el8.10.0+4267+35168c80.8.x86_64.rpm 23f55b24687ad10c8338a0756584353c85b98e932de80382f0511aa50b421197
x86_64 pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.x86_64.rpm 2f4d1ad704a236fdf89e2a91bad27c1290cc018d37a94b535bfe9b56d51393b8
x86_64 gimp-devel-2.8.22-26.module_el8.10.0+4267+35168c80.8.x86_64.rpm 51b20f15486b749b66bc1f7c5be10fb7942612265910c8bbf7afaad9b0a6f539
x86_64 gimp-libs-2.8.22-26.module_el8.10.0+4267+35168c80.8.x86_64.rpm 6cc726c238ae949e214d68a6645097f719b159fd2f95d390b5560d9fc47e3339
x86_64 python2-cairo-devel-1.16.3-7.module_el8.10.0+4267+35168c80.x86_64.rpm 6e7399ebc756b93f11e431f1ba93c2c93a43632128cdb168a4abab62696ddfa5
x86_64 pygobject2-2.28.7-5.module_el8.10.0+4267+35168c80.x86_64.rpm 84ddcf2e227e6d5cf88a14bdcc2abc203aa89338d23bbee6b6a374a890c9b761
x86_64 pygobject2-devel-2.28.7-5.module_el8.10.0+4267+35168c80.x86_64.rpm 94329879ad86a38fd586f8fb1a0bedf7d54410f266b88b2edf49cae8c291f829
x86_64 pygobject2-codegen-2.28.7-5.module_el8.10.0+4267+35168c80.x86_64.rpm a90fdc130f360fe3112bd3f492f8ff35e95523c3ab9edfe6d9cc4277b1b380d4
x86_64 gimp-2.8.22-26.module_el8.10.0+4267+35168c80.8.x86_64.rpm ac685d35695301381c984ddafc08e444fd6888beb436834f5f0e92e73bf654d4
x86_64 pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.x86_64.rpm c31a1d5dc208ac6b26e5a44000795e1e773e1e95a479c0529997765ba24fdcff
x86_64 pygobject2-doc-2.28.7-5.module_el8.10.0+4267+35168c80.x86_64.rpm d2ddc1f4b667f186308193ccb12d89636f1e3398b3450091f241fdb9e70c357d
x86_64 pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.x86_64.rpm e091c6387576c98a524580d77825cb438dc432a85725b99800ce9d147fe93ba6
x86_64 python2-cairo-1.16.3-7.module_el8.10.0+4267+35168c80.x86_64.rpm fd0b61e77c93cac8aec10d72953a580f814e75ba65b524f1f2ca1efe5f686adb
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.