Skip to content
OpenAdvisories
High ELSA-2026-4173 5 CVEs

Important: gimp security update (Oracle Linux 9)

Published Mar 10, 2026 · Updated Mar 10, 2026

Ecosystem: Oracle Linux

Summary

[2:3.0.4-1.4]
- fix CVE-2026-0797
- fix CVE-2026-2044
- fix CVE-2026-2045
- fix CVE-2026-2047
- fix CVE-2026-2048

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 gimp 2:3.0.4-1.el9_7.4
Oracle Linux · 9 gimp-libs 2:3.0.4-1.el9_7.4

Vulnerabilities 5

  • High 7.8
    CVE-2026-0797

    GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that th…

    GIMP GIMP gimp gimp Debian Ubuntu
  • High 7.8
    CVE-2026-2044

    GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability

    GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the targ…

    GIMP GIMP gimp gimp Debian Ubuntu
  • High 7.8
    CVE-2026-2045

    GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the targe…

    GIMP GIMP gimp gimp Debian Ubuntu
  • High 7.8
    CVE-2026-2047

    GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that t…

    GIMP GIMP gimp gimp Debian Ubuntu
  • High 7.8
    CVE-2026-2048

    GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the targe…

    GIMP GIMP gimp gimp Debian Ubuntu