Summary
The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.
Security Fix(es):
* gimp: gimp: stack buffer overflow in PSD image resource header loader (CVE-2026-119528)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 9 | gimp | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-debuginfo | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-debuginfo | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-debuginfo | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-debuginfo | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-debugsource | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-debugsource | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-debugsource | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-debugsource | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-libs | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-libs | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-libs | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-libs | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-libs-debuginfo | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-libs-debuginfo | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-libs-debuginfo | 2:3.0.4-8.el9_9.6 |
| Rocky Linux · 9 | gimp-libs-debuginfo | 2:3.0.4-8.el9_9.6 |
Vulnerabilities 1
-
High 7.8
Gimp: gimp: stack buffer overflow in psd image resource header loader
A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a stack-based buffer overflow, leading to a cras…