{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "Harden the PCX loader against a 16-bit truncation of the expected bytes per\n line (width 65536, 8 bpp) that bypasses the check added for CVE-2026-4887", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.8esu/advisories/2026/clsa-2026_1791292627.json" } ], "tracking": { "current_release_date": "2026-10-06T13:18:41Z", "generator": { "date": "2026-10-06T13:18:41Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1791292627", "initial_release_date": "2026-10-06T13:18:41Z", "revision_history": [ { "date": "2026-10-06T13:18:41Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "gimp: Fix of 10 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.8", "product": { "name": "AlmaLinux 9.8", "product_id": "AlmaLinux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Rocky Linux 9.8", "product": { "name": "Rocky Linux 9.8", "product_id": "Rocky Linux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:resf:rocky_linux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Rocky Linux" } ], "category": "vendor", "name": "Rocky Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "product": { "name": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "product_id": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/gimp-devel-tools@3.0.4-4.el9_8.10.tuxcare.els3?arch=aarch64&epoch=2" } } }, { "category": "product_version", "name": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "product": { "name": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "product_id": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/gimp-devel@3.0.4-4.el9_8.10.tuxcare.els3?arch=aarch64&epoch=2" } } }, { "category": "product_version", "name": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "product": { "name": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "product_id": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/gimp@3.0.4-4.el9_8.10.tuxcare.els3?arch=aarch64&epoch=2" } } }, { "category": "product_version", "name": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "product": { "name": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "product_id": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/gimp-libs@3.0.4-4.el9_8.10.tuxcare.els3?arch=aarch64&epoch=2" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "product": { "name": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "product_id": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/gimp-devel-tools@3.0.4-4.el9_8.10.tuxcare.els3?arch=i686&epoch=2" } } }, { "category": "product_version", "name": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "product": { "name": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "product_id": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/gimp-devel@3.0.4-4.el9_8.10.tuxcare.els3?arch=i686&epoch=2" } } }, { "category": "product_version", "name": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "product": { "name": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "product_id": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/gimp@3.0.4-4.el9_8.10.tuxcare.els3?arch=i686&epoch=2" } } }, { "category": "product_version", "name": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "product": { "name": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "product_id": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/gimp-libs@3.0.4-4.el9_8.10.tuxcare.els3?arch=i686&epoch=2" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "product": { "name": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "product_id": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/gimp-devel-tools@3.0.4-4.el9_8.10.tuxcare.els3?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "product": { "name": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "product_id": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/gimp-devel@3.0.4-4.el9_8.10.tuxcare.els3?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "product": { "name": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "product_id": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/gimp@3.0.4-4.el9_8.10.tuxcare.els3?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "product": { "name": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "product_id": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/gimp-libs@3.0.4-4.el9_8.10.tuxcare.els3?arch=x86_64&epoch=2" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64" }, "product_reference": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686" }, "product_reference": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" }, "product_reference": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" }, "product_reference": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64" }, "product_reference": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686" }, "product_reference": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64" }, "product_reference": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686" }, "product_reference": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" }, "product_reference": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686" }, "product_reference": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64" }, "product_reference": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" }, "product_reference": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64" }, "product_reference": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686" }, "product_reference": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" }, "product_reference": "gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" }, "product_reference": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64" }, "product_reference": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686" }, "product_reference": "gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64" }, "product_reference": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686" }, "product_reference": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" }, "product_reference": "gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686" }, "product_reference": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64" }, "product_reference": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" }, "product_reference": "gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-78465", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently large dimensions, the calculation exceeds the 32-bit integer limit and overflows, resulting in an undersized heap-based buffer allocation. This integer overflow issue results in a heap-based buffer overflow when the plugin subsequently writes image data into the undersized buffer, causing memory corruption, potentially leading to arbitrary code execution or a denial of service.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-78465" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-78465", "url": "https://access.redhat.com/security/cve/CVE-2026-78465" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2522057", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2522057" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16578", "url": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16578" } ], "release_date": "2026-08-24T17:18:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-06T13:17:08.705423Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627", "product_ids": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-0797", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ICO files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28599.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0797" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/69cc6b1a6645dc9c4d7b484483dbe6a84b922b9c", "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/69cc6b1a6645dc9c4d7b484483dbe6a84b922b9c" }, { "category": "external", "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-050/", "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-050/" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4173", "url": "https://access.redhat.com/errata/RHSA-2026:4173" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:5113", "url": "https://access.redhat.com/errata/RHSA-2026:5113" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:5388", "url": "https://access.redhat.com/errata/RHSA-2026:5388" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:5389", "url": "https://access.redhat.com/errata/RHSA-2026:5389" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:5390", "url": "https://access.redhat.com/errata/RHSA-2026:5390" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:5391", "url": "https://access.redhat.com/errata/RHSA-2026:5391" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:5434", "url": "https://access.redhat.com/errata/RHSA-2026:5434" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:5435", "url": "https://access.redhat.com/errata/RHSA-2026:5435" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:5436", "url": "https://access.redhat.com/errata/RHSA-2026:5436" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:5437", "url": "https://access.redhat.com/errata/RHSA-2026:5437" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-0797", "url": "https://access.redhat.com/security/cve/CVE-2026-0797" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2441524", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441524" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0797.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0797.json" } ], "release_date": "2026-02-20T22:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-06T13:17:08.705423Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627", "product_ids": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-10920", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ICNS files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27684.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-10920" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2443", "url": "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2443" }, { "category": "external", "summary": "https://www.zerodayinitiative.com/advisories/ZDI-25-909/", "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-909/" } ], "release_date": "2025-10-29T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-06T13:17:08.705423Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627", "product_ids": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-10924", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of FF files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27836.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-10924" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2448", "url": "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2448" }, { "category": "external", "summary": "https://www.zerodayinitiative.com/advisories/ZDI-25-913/", "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-913/" } ], "release_date": "2025-10-29T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-06T13:17:08.705423Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627", "product_ids": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-18306", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SGI files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29396.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-18306" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/76531da9732f38566e5fd8f8f80c837158511ae5", "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/76531da9732f38566e5fd8f8f80c837158511ae5" }, { "category": "external", "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-459/", "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-459/" } ], "release_date": "2026-08-20T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-06T13:17:08.705423Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627", "product_ids": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-18308", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of TIF files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29405.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-18308" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/d84f8e58f56681a0b4c66129c568cb796725ab9d", "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/d84f8e58f56681a0b4c66129c568cb796725ab9d" }, { "category": "external", "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-461/", "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-461/" } ], "release_date": "2026-08-20T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-06T13:17:08.705423Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627", "product_ids": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-40917", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the `icns_slurp()` function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process such files.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-40917" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-40917", "url": "https://access.redhat.com/security/cve/CVE-2026-40917" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2458746", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458746" } ], "release_date": "2026-04-15T20:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-06T13:17:08.705423Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627", "product_ids": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-58381", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "description", "text": "A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-58381" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-58381", "url": "https://access.redhat.com/security/cve/CVE-2026-58381" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2496166", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496166" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/b22e147b", "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/b22e147b" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16207", "url": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16207" } ], "release_date": "2026-07-02T20:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-06T13:17:08.705423Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627", "product_ids": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-82328", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "A flaw was found in the file-ico plugin in GIMP. When processing a specially crafted ICO image file, the plugin does not properly validate the used_clrs (palette count) parameter. This incorrect validation leads to improper memory bounds checking, resulting in a heap out-of-bounds read. This issue can result in an application crash, leading to a denial of service or a limited information disclosure of heap memory contents.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-82328" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-82328", "url": "https://access.redhat.com/security/cve/CVE-2026-82328" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2525612", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525612" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16585", "url": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16585" } ], "release_date": "2026-08-28T16:18:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-06T13:17:08.705423Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627", "product_ids": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-18307", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of TIF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29404.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-18307" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/bace3e7fd54104fe6b70c1703e9b982a4770811d", "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/bace3e7fd54104fe6b70c1703e9b982a4770811d" }, { "category": "external", "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-460/", "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-460/" } ], "release_date": "2026-08-20T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-06T13:17:08.705423Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627", "product_ids": [ "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "AlmaLinux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-devel-tools-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.aarch64", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.i686", "Rocky Linux-9.8:gimp-libs-2:3.0.4-4.el9_8.10.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791292627" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }