[ALSA-2026:61587] Important: gimp security update
Type:
security
Severity:
important
Release date:
2026-09-02
Description:
The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow (CVE-2026-59090) * gimp: GIMP: Arbitrary code execution via crafted TIF file parsing (CVE-2026-18304) * gimp: GIMP: Remote code execution via PSD file parsing integer overflow (CVE-2026-18301) * gimp: GIMP: Remote Code Execution via TIF File Parsing Integer Overflow (CVE-2026-18308) * gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18302) * gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow (CVE-2026-18305) * gimp: GIMP: Remote code execution via TIF file parsing vulnerability (CVE-2026-18303) * gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow (CVE-2026-18306) * gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18307) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 gimp-libs-3.0.4-4.el9_8.10.aarch64.rpm 38255f4c29db1dd9d01eefab81d79ad633e9948d1acada931771f85bc11f16b4
aarch64 gimp-3.0.4-4.el9_8.10.aarch64.rpm 3ddbf0e83d587f2b8bb2edaf6b743e09769456834a026321cc45bef66fde1318
i686 gimp-libs-3.0.4-4.el9_8.10.i686.rpm 5df60b439f06465ba5dae264b1c12c93f24d46cc19d215f5deb2b22b4f90bcb7
ppc64le gimp-3.0.4-4.el9_8.10.ppc64le.rpm 712c2a6ef14ca49e66ddfd69c7a1c45070a4b21d8cb8b873f3425eea390b3d16
ppc64le gimp-libs-3.0.4-4.el9_8.10.ppc64le.rpm aae267830da89f76af8eb3bebf34a9f3d70576946bfb3602026ad5489b8921c2
x86_64 gimp-3.0.4-4.el9_8.10.x86_64.rpm 8b88fc813c785ee7df3944e077e60d40b3e0edc657819fcbbef82a86cde70d28
x86_64 gimp-libs-3.0.4-4.el9_8.10.x86_64.rpm b49af2b5571f2a28901a615a1ac0ee26b5f74d8b7cb7cf79e91e0d119066e1a6
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.