Skip to content
OpenAdvisories
High ALAS2-2025-3030 1 CVE

Important: gegl security update (Amazon Linux 2)

Published Oct 14, 2025 · Updated Oct 14, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-10921: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Fixed packages 3

ReleasePackageFixed in
Amazon Linux · 2 gegl 0:0.2.0-19.amzn2.1.1
Amazon Linux · 2 gegl-debuginfo 0:0.2.0-19.amzn2.1.1
Amazon Linux · 2 gegl-devel 0:0.2.0-19.amzn2.1.1

Vulnerabilities 1

  • High 7.8
    CVE-2025-10921

    GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that th…

    GIMP GIMP gegl gegl Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-10921.html