GIMP: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• High 8.4
  CVE-2026-59090

  Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow

  A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Aug 10, 2026
• High 7.8
  CVE-2026-59087

  Gimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocation

  A flaw was found in the GIMP image manipulation program, specifically within its Seattle Filmworks file loader. A remote attacker could exploit this vulnerability by tricking a user into opening a specially crafted Seattle Filmworks file. This could lead to a…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Aug 10, 2026
• High 7.3
  CVE-2026-59091

  Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file

  A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. A remote attacker could exploit these vulnerabilities by tricking a user into opening a specially crafted image file. This could lead to unexpected application behavior or …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Aug 10, 2026
• Medium 5.5
  CVE-2026-59088

  Gimp: gimp: denial of service via signed integer overflow in fli file processing

  A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Aug 10, 2026

Revision history

1. 2026-11-05 #12

   Neue Updates von Oracle Linux aufgenommen

2. 2026-11-01 #11

   Neue Updates von Red Hat aufgenommen

3. 2026-10-21 #10

   Neue Updates von Oracle Linux aufgenommen

4. 2026-10-11 #9

   Neue Updates von Red Hat aufgenommen

5. 2026-09-29 #8

   Neue Updates von Red Hat aufgenommen

6. 2026-09-23 #7

   Neue Updates von SUSE aufgenommen

7. 2026-09-03 #6

   Neue Updates von Oracle Linux aufgenommen

8. 2026-09-01 #5

   Neue Updates von Oracle Linux aufgenommen

9. 2026-08-31 #4

   Neue Updates von Amazon und Red Hat aufgenommen

10. 2026-08-27 #3

    Neue Updates von Debian aufgenommen

11. 2026-08-23 #2

    Neue Updates von openSUSE aufgenommen

12. 2026-08-10 #1

    Initiale Fassung

References

• GitHub Security Advisory GHSA-hh4m-xc2h-qj94 vom 2026-08-10
  https://github.com/advisories/GHSA-hh4m-xc2h-qj94
• GitHub Security Advisory GHSA-RM5P-W89V-VXG2 vom 2026-08-10
  https://github.com/advisories/GHSA-RM5P-W89V-VXG2
• GitHub Security Advisory GHSA-GFH5-Q868-Q4PW vom 2026-08-10
  https://github.com/advisories/GHSA-GFH5-Q868-Q4PW
• GitHub Security Advisory GHSA-47Q2-MM4C-PMPC vom 2026-08-10
  https://github.com/advisories/GHSA-47Q2-MM4C-PMPC
• EU Vulnerability Database vom 2026-08-10
  https://euvd.enisa.europa.eu/enisa/EUVD-2026-55165
• EU Vulnerability Database vom 2026-08-10
  https://euvd.enisa.europa.eu/enisa/EUVD-2026-55262
• EU Vulnerability Database vom 2026-08-10
  https://euvd.enisa.europa.eu/enisa/EUVD-2026-55616
• EU Vulnerability Database vom 2026-08-10
  https://euvd.enisa.europa.eu/enisa/EUVD-2026-55732
• openSUSE Security Update OPENSUSE-SU-2026:11547-1 vom 2026-08-23
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LUXP5VNBOZ64AC65YKLO3MBCA4XXR3YS/
• SUSE Security Update SUSE-SU-2026:3688-1 vom 2026-08-24
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028447.html
• Debian Security Advisory DSA-6470 vom 2026-08-27
  https://security-tracker.debian.org/tracker/DSA-6470-1
• Amazon Linux Security Advisory ALAS2GIMP-2026-019 vom 2026-09-01
  https://alas.aws.amazon.com/AL2/ALAS2GIMP-2026-019.html
• Red Hat Security Advisory RHSA-2026:61587 vom 2026-09-01
  https://access.redhat.com/errata/RHSA-2026:61587
• Oracle Linux Security Advisory ELSA-2026-61587 vom 2026-09-02
  https://linux.oracle.com/errata/ELSA-2026-61587-0.html
• Oracle Linux Security Advisory ELSA-2026-62507 vom 2026-09-03
  https://linux.oracle.com/errata/ELSA-2026-62507-0.html
• SUSE Security Update SUSE-SU-2026:4309-1 vom 2026-09-23
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029368.html
• Red Hat Security Advisory RHSA-2026:73768 vom 2026-09-30
  https://access.redhat.com/errata/RHSA-2026:73768
• Red Hat Security Advisory RHSA-2026:80509 vom 2026-10-12
  https://access.redhat.com/errata/RHSA-2026:80509
• Oracle Linux Security Advisory ELSA-2026-84744 vom 2026-10-21
  http://linux.oracle.com/errata/ELSA-2026-84744.html
• Red Hat Security Advisory RHSA-2026:93589 vom 2026-11-02
  https://access.redhat.com/errata/RHSA-2026:93589
• Oracle Linux Security Advisory ELSA-2026-95482 vom 2026-11-05
  https://linux.oracle.com/errata/ELSA-2026-95482.html