Skip to content
OpenAdvisories
High ELSA-2026-1590 1 CVE

Important: gimp security update (Oracle Linux 7)

Published Feb 24, 2026 · Updated Feb 24, 2026

Ecosystem: Oracle Linux

Summary

[2.8.22-1.0.5]
- Fixes CVE-2025-14422 [Orabug: 38904303]

[2:2.22-1.0.5]
- Fixes CVE-2025-10922 and CVE-2025-10934 [Orabug: 38739185]

[2:2.8.22-1.0.3]
- Fixes CVE-2025-5473 (GIMP ICO File Parsing Integer Overflow) [Orabug: 38110877]
- Fixes CVE-2025-48797 (Multiple heap buffer overflows in TGA parser)
- Fixes CVE-2025-48798 (Multiple use after free in XCF parser)

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 gimp 2:2.8.22-1.0.7.el7
Oracle Linux · 7 gimp-devel 2:2.8.22-1.0.7.el7
Oracle Linux · 7 gimp-devel-tools 2:2.8.22-1.0.7.el7
Oracle Linux · 7 gimp-libs 2:2.8.22-1.0.7.el7

Vulnerabilities 1

  • High 7.8
    CVE-2025-14422

    GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability

    GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target m…

    GIMP GIMP gimp gimp Debian Ubuntu