GIMP Plugins: Mehrere Schwachstellen ermöglichen Codeausführung und DoS

Summary

Product

Vulnerabilities 3

• High 7.8
  CVE-2026-90947

  Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file

  A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Sep 14, 2026
• High 7.8
  CVE-2026-90948

  Gimp: gimp: heap-based buffer overflow in ico loader via integer overflow in embedded png dimensions

  A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-base…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Sep 14, 2026
• High 7.8
  CVE-2026-90949

  Gimp: gimp: heap-based buffer overflow in psp loader due to selection-channel geometry mismatch

  A flaw was found in GIMP's PSP (Paint Shop Pro) file loader. When processing a compressed selection channel, a heap-based buffer overflow can occur due to a mismatch between the allocated buffer size and the amount of data decompressed. A remote attacker coul…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Sep 14, 2026

Revision history

1. 2026-11-11 #14

   Neue Updates von Red Hat aufgenommen

2. 2026-11-05 #13

   Neue Updates von Oracle Linux aufgenommen

3. 2026-11-01 #12

   Neue Updates von Red Hat aufgenommen

4. 2026-10-21 #11

   Neue Updates von Oracle Linux aufgenommen

5. 2026-10-19 #10

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

6. 2026-10-18 #9

   Neue Updates von Red Hat aufgenommen

7. 2026-10-12 #8

   Neue Updates von Amazon aufgenommen

8. 2026-10-05 #7

   Neue Updates von Oracle Linux aufgenommen

9. 2026-10-04 #6

   Neue Updates von Red Hat aufgenommen

10. 2026-10-01 #5

    Neue Updates von SUSE aufgenommen

11. 2026-09-30 #4

    Neue Updates von openSUSE aufgenommen

12. 2026-09-27 #3

    Neue Updates von openSUSE aufgenommen

13. 2026-09-20 #2

    Neue Updates von Debian aufgenommen

14. 2026-09-14 #1

    Initiale Fassung

References

• GitHub Security Advisory vom 2026-09-14
  https://github.com/advisories/GHSA-PCJR-J975-J4C4
• GitHub Security Advisory vom 2026-09-14
  https://github.com/advisories/GHSA-4GCM-X544-RHH4
• GitHub Security Advisory vom 2026-09-14
  https://github.com/advisories/GHSA-5w7m-4vvh-65j3
• Red Hat Bugtracker 2533005 vom 2026-09-14
  https://bugzilla.redhat.com/show_bug.cgi?id=2533005
• Red Hat Bugtracker 2533008 vom 2026-09-14
  https://bugzilla.redhat.com/show_bug.cgi?id=2533008
• Red Hat Bugtracker 2533013 vom 2026-09-14
  https://bugzilla.redhat.com/show_bug.cgi?id=2533013
• Debian Security Advisory DSA-6509 vom 2026-09-20
  https://security-tracker.debian.org/tracker/DSA-6509-1
• openSUSE Security Update OPENSUSE-SU-2026:21959-1 vom 2026-09-25
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CPUQPYJDVVDVKEDXDLJK4PEOVZLSYY43/
• openSUSE Security Update OPENSUSE-SU-2026:11890-1 vom 2026-09-30
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C7EXHOBQOGSI72FUDZQDNV4DYSYL6PXM/
• SUSE Security Update SUSE-SU-2026:4409-1 vom 2026-10-01
  https://lists.suse.com/pipermail/sle-security-updates/2026-October/029493.html
• Red Hat Security Advisory RHSA-2026:75575 vom 2026-10-05
  https://access.redhat.com/errata/RHSA-2026:75575
• Oracle Linux Security Advisory ELSA-2026-75575 vom 2026-10-05
  https://oss.oracle.com/pipermail/el-errata/2026-October/022251.html
• Amazon Linux Security Advisory ALAS2GIMP-2026-021 vom 2026-10-13
  https://alas.aws.amazon.com/AL2/ALAS2GIMP-2026-021.html
• Red Hat Security Advisory RHSA-2026:84744 vom 2026-10-19
  https://access.redhat.com/errata/RHSA-2026:84744
• Rocky Linux Security Advisory RLSA-2026:84744 vom 2026-10-20
  https://errata.build.resf.org/RLSA-2026:84744
• Oracle Linux Security Advisory ELSA-2026-84744 vom 2026-10-21
  http://linux.oracle.com/errata/ELSA-2026-84744.html
• Red Hat Security Advisory RHSA-2026:93589 vom 2026-11-02
  https://access.redhat.com/errata/RHSA-2026:93589
• Oracle Linux Security Advisory ELSA-2026-95482 vom 2026-11-05
  https://linux.oracle.com/errata/ELSA-2026-95482.html
• Red Hat Security Advisory RHSA-2026:98462 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98462