[ALSA-2026:95482] Important: gimp:2.8 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-11-05
Description:
The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader (load_resource_1033) (CVE-2026-112257) Bug Fix(es) and Enhancement(s): * gimp: xpm poc file for CVE-2026-4154 should error differently (JIRA:RHEL-178367) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.aarch64.rpm 3b2ffb23dc24e83e10c83f4ccc075cc103fd56a2764b58524a1935394872ac76
aarch64 python2-cairo-devel-1.16.3-7.module_el8.10.0+4267+35168c80.aarch64.rpm 447ac1bd4a54e2dfe2135ada69c94b6a8189c27a0306265f33888546262a47d0
aarch64 pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.aarch64.rpm 540e9dde16c8fa7c18f9542b838001305955750fe85125fcd97ba750289b5cb0
aarch64 pygobject2-devel-2.28.7-5.module_el8.10.0+4137+2d0d25cf.aarch64.rpm 59f5648a77fb81d71431f8eb29967535d768c9a4371eb21313641133a65fc8d6
aarch64 pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.aarch64.rpm 6ef991da497a0c4d97d896c8f26b8eace58ac5c5a2ca40c2f000ee3a0b016851
aarch64 pygobject2-doc-2.28.7-5.module_el8.10.0+4137+2d0d25cf.aarch64.rpm 7a520fb129e56764a5a11cba75028686dffbb30d0f032b3625079ab50588dfd0
aarch64 gimp-2.8.22-26.module_el8.10.0+4352+8516153e.10.aarch64.rpm 88fedc5c211069e9705ba209e798d51e16f79a44085446fd02cd5e4371d24453
aarch64 pygobject2-codegen-2.28.7-5.module_el8.10.0+4267+35168c80.aarch64.rpm 90381330f30e95ac33d677684ef3305609a0dde8b0c3ba0577677b70a269fb81
aarch64 pygobject2-2.28.7-5.module_el8.10.0+4175+c208a0bf.aarch64.rpm ab9e892635db86825553b68892a804cfc8d4ee33129c624e424b022c972a0b24
aarch64 gimp-devel-2.8.22-26.module_el8.10.0+4352+8516153e.10.aarch64.rpm cfb347e7bb36c72216d0968753fc7c8932f1af2e088c7c0eb213d4d286f5770a
aarch64 python2-cairo-1.16.3-7.module_el8.10.0+3952+571e801c.aarch64.rpm d140bb170981c279bed8331a3bbd9d9f2d53341292aee19a2fb49c0de12c57bf
aarch64 gimp-devel-tools-2.8.22-26.module_el8.10.0+4352+8516153e.10.aarch64.rpm e847b64fb35c4d147b777118b4f0d5dca31abcabf7a397bfdc2e744904f5efb9
aarch64 gimp-libs-2.8.22-26.module_el8.10.0+4352+8516153e.10.aarch64.rpm f87c6ac6c7bf3c0f5b509f03fd41df4befd955e237b2f03f906b4124d01e260d
noarch pygtk2-doc-2.24.0-25.module_el8.9.0+3725+d1441900.noarch.rpm bec32577bca5233d67a34af1ef0ae0d1ca15f8896607b22d94cc18d8d4c93d70
ppc64le pygobject2-devel-2.28.7-5.module_el8.10.0+4267+35168c80.ppc64le.rpm 068adc70a80ab7ada50f8dc6263ae80c4ddae9175e668e8fb8d5511ac5539f74
ppc64le gimp-devel-2.8.22-26.module_el8.10.0+4352+8516153e.10.ppc64le.rpm 17590bc378b79583cea4e78e461838f603a67d3ed0815ecc070a2e1608f2904c
ppc64le gimp-devel-tools-2.8.22-26.module_el8.10.0+4352+8516153e.10.ppc64le.rpm 17b501cf533fd046faa0ead83478ac8ee6f50b232f934828ed5b8374026aab27
ppc64le pygobject2-2.28.7-5.module_el8.10.0+4267+35168c80.ppc64le.rpm 259ccd30531b45fe407054614f9a169f29510214701b3b30be78a2dca320c517
ppc64le pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.ppc64le.rpm 400bfe9b8ecc094297226eeab20bf88f02344beb51ec20496ddd8cfe6d138b0e
ppc64le python2-cairo-1.16.3-7.module_el8.10.0+4267+35168c80.ppc64le.rpm 50a023b50c7582b0b98b2003501d95c15cdbe85e2fecc6ac934ad7272d48cd36
ppc64le pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.ppc64le.rpm 50de78cdd9a7eb9d765416ef8b6025d0212b9f400834b8309ebacedc54f59186
ppc64le pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.ppc64le.rpm 6ffbf1d5a9ac7e89910005c28ad62626a281d20ff5b3c2b7d192e996eaedff85
ppc64le gimp-2.8.22-26.module_el8.10.0+4352+8516153e.10.ppc64le.rpm 712a5dea1b6588d6dc2c7bf64184d3e7c7614b8bc50c19fb680c2dfc50ed3936
ppc64le python2-cairo-devel-1.16.3-7.module_el8.10.0+4267+35168c80.ppc64le.rpm 83f99b5a696dd03da36e5f26f99ac371daf198518ccdf2af1b27e5e7493838fe
ppc64le pygobject2-codegen-2.28.7-5.module_el8.10.0+4267+35168c80.ppc64le.rpm d6402a4ecdbde7268b0d20c180c11b9f2e0bad8d4cc43fc3577eaf0c5d9cddd4
ppc64le gimp-libs-2.8.22-26.module_el8.10.0+4352+8516153e.10.ppc64le.rpm f383688fc0c25a0f0fe1c4360fd75e1a21950af0807d399d886ed514204d5be6
ppc64le pygobject2-doc-2.28.7-5.module_el8.10.0+4267+35168c80.ppc64le.rpm f97a305654b1e87ac374b3334ecfda6b51a39b3f88cdcae9d1d00dfd9bb468e7
s390x pygobject2-codegen-2.28.7-5.module_el8.10.0+4267+35168c80.s390x.rpm 11729e0bcf1a278528b101341c86d3ce8b31ec464dd039e8813ac55b62e939b1
s390x gimp-libs-2.8.22-26.module_el8.10.0+4352+8516153e.10.s390x.rpm 3015a99e4076a62beb5482e0ba89a034bdc7248bbb131763ee643388d5935551
s390x pygobject2-doc-2.28.7-5.module_el8.10.0+4267+35168c80.s390x.rpm 353dfd049d13f710bd8624f2bb731074e8e124010ea9f350968ca51d7a2a8729
s390x pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm 42ea8b58abfff83cebc7a09a7f6f264b168a95782decbb03b4fcfef37fd7c062
s390x pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm 43c790ef899908821a64cfad4af33097d1a9d9351a75d63d45e4363e0d91eec8
s390x pygobject2-2.28.7-5.module_el8.10.0+4137+2d0d25cf.s390x.rpm 5f06e53b0169ce5af9a6ea4e03d05464845aec96e9db0e9b45a2698b3b84e5f5
s390x gimp-devel-2.8.22-26.module_el8.10.0+4352+8516153e.10.s390x.rpm 71358376aae6cc4adab8da1592868e6badffd341e8eb031d44343e4c5389687d
s390x pygobject2-devel-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm 753e845a487e2072a62bfa272332266761c207df3360102c42900695a0fe3d32
s390x pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm 91402fea22feef9d15400358a93ae5d2ff0b95b332edfbae2245ac5846848476
s390x python2-cairo-1.16.3-7.module_el8.10.0+4267+35168c80.s390x.rpm 91bd4eadb7e4cee30ed68b34c252e3d4a326797a2fb8f52ac2cddf02330c327a
s390x gimp-2.8.22-26.module_el8.10.0+4352+8516153e.10.s390x.rpm bc87ed45fbb3f5e9d263be725825829ab0b68c824e8a0f15057724d44b7647b0
s390x python2-cairo-devel-1.16.3-7.module_el8.10.0+4175+c208a0bf.s390x.rpm c03aa58a0606447844f42ce6aab06400156abb5a6686f9b9ebedbd6ef07d087e
s390x gimp-devel-tools-2.8.22-26.module_el8.10.0+4352+8516153e.10.s390x.rpm d5036d27d0a45b31655b1ce206bc881b15cb0334d1c07e0271d3d3e44d99927c
x86_64 gimp-2.8.22-26.module_el8.10.0+4352+8516153e.10.x86_64.rpm 168467e32aa9e669b0817183db06e7f477cd7ef680a643bb5243f0a22236be84
x86_64 pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.x86_64.rpm 2f4d1ad704a236fdf89e2a91bad27c1290cc018d37a94b535bfe9b56d51393b8
x86_64 gimp-devel-tools-2.8.22-26.module_el8.10.0+4352+8516153e.10.x86_64.rpm 4902b87e4934f5b44f8d38fd8efc086af5e56e8a13f39ed2172f9bf75ff1461a
x86_64 pygobject2-2.28.7-5.module_el8.10.0+4175+c208a0bf.x86_64.rpm 4992232262cc1d58c37b6a2a7d8c1467b3fa60ef1c10d7cdebe4f1fb6d576372
x86_64 python2-cairo-devel-1.16.3-7.module_el8.10.0+4175+c208a0bf.x86_64.rpm 4f1c30f60cc279d37cb13aaaa75a48c1d7c2c2d3c352fb26f3a0d7dfa510609a
x86_64 python2-cairo-1.16.3-7.module_el8.10.0+4175+c208a0bf.x86_64.rpm 688adf8a59a6393fb89dc781734a27f6c10274f00fc0ba33a7f2d23d2e296963
x86_64 pygobject2-devel-2.28.7-5.module_el8.10.0+4267+35168c80.x86_64.rpm 94329879ad86a38fd586f8fb1a0bedf7d54410f266b88b2edf49cae8c291f829
x86_64 gimp-devel-2.8.22-26.module_el8.10.0+4352+8516153e.10.x86_64.rpm b8e6caf74dbe64da11ab8e93601adcaedf16391384b2f7ff675c535cefe407a2
x86_64 pygobject2-codegen-2.28.7-5.module_el8.10.0+4175+c208a0bf.x86_64.rpm c191203c523dc90fe428a81e470bb7f11fcf1fffa34b6903a0860633e12d0cbb
x86_64 pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.x86_64.rpm c31a1d5dc208ac6b26e5a44000795e1e773e1e95a479c0529997765ba24fdcff
x86_64 pygobject2-doc-2.28.7-5.module_el8.10.0+4137+2d0d25cf.x86_64.rpm c4279688fa7c692a068642dd21bab0943c344cd95617e48f157fb1b1fc467bc2
x86_64 pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.x86_64.rpm e091c6387576c98a524580d77825cb438dc432a85725b99800ce9d147fe93ba6
x86_64 gimp-libs-2.8.22-26.module_el8.10.0+4352+8516153e.10.x86_64.rpm f8513e350a6be004a5fb1246a4106945cc9b76ad8fdc14dc811a518c5b74e858
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.