Skip to content
OpenAdvisories
High ELSA-2026-0914 4 CVEs

Important: gimp security update (Oracle Linux 9)

Published Jan 21, 2026 · Updated Jan 21, 2026

Ecosystem: Oracle Linux

Summary

[2:3.0.4-1.2]
- fix CVE-2025-14422
- fix CVE-2025-14423
- fix CVE-2025-14424
- fix CVE-2025-14425

[2:3.0.4-1.1]
- fix CVE-2025-10920
- fix CVE-2025-10921
- fix CVE-2025-10922
- fix CVE-2025-10923
- fix CVE-2025-10924
- fix CVE-2025-10925
- fix CVE-2025-10934

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 gimp 2:3.0.4-1.el9_7.2
Oracle Linux · 9 gimp-libs 2:3.0.4-1.el9_7.2

Vulnerabilities 4

  • High 7.8
    CVE-2025-14422

    GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability

    GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target m…

    GIMP GIMP gimp gimp Debian Ubuntu
  • High 7.8
    CVE-2025-14423

    GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that t…

    GIMP GIMP gimp gimp Debian Ubuntu
  • High 7.8
    CVE-2025-14424

    GIMP XCF File Parsing Use-After-Free Remote Code Execution Vulnerability

    GIMP XCF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target mus…

    GIMP GIMP gimp gimp Debian Ubuntu
  • High 7.8
    CVE-2025-14425

    GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that th…

    GIMP GIMP gimp gimp Debian Ubuntu