Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gimp | 2:3.0.4-4.el9_8.9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gimp-debuginfo | 2:3.0.4-4.el9_8.9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gimp-debugsource | 2:3.0.4-4.el9_8.9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gimp-devel-tools-debuginfo | 2:3.0.4-4.el9_8.9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gimp-libs | 2:3.0.4-4.el9_8.9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gimp-libs-debuginfo | 2:3.0.4-4.el9_8.9 |
Vulnerabilities 3
-
High 7.8
Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images
A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^3…
-
High 7.3
Gimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c)
A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buff…
-
High 7.1
Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images
A flaw was found in the file-icns plugin in GIMP. When applying a decompressed mask during ICNS image processing, the plugin reads from the mask data buffer without verifying if the cursor exceeds the allocated resource size. If a crafted file contains a trun…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2461725
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2507475
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2507557
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50817.json
-
report
https://access.redhat.com/security/cve/CVE-2026-42169
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-42169
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-42169
-
report
https://access.redhat.com/security/cve/CVE-2026-66758
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-66758
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-66758
-
article
https://gitlab.gnome.org/GNOME/gimp/-/issues/16528
-
report
https://access.redhat.com/security/cve/CVE-2026-66759
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-66759
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-66759